diff --git a/.fern/replay.lock b/.fern/replay.lock
index 0593e246..895bd2df 100644
--- a/.fern/replay.lock
+++ b/.fern/replay.lock
@@ -24,390 +24,11 @@ generations:
     cli_version: unknown
     generator_versions:
       fernapi/fern-java-sdk: 4.11.1
-current_generation: 6123049f4ae684b09b5bfb8da5ed607adc6f871d
-patches:
-  - id: patch-ec28244b
-    content_hash: sha256:138547c31047858fa903f656bd52246c357d3c34bd650b5648c0ed7f0f37ee0f
-    original_commit: ec28244b9fc3bce518088b96a5402cbb8ad1dcc6
-    original_message: "feat: add MIGRATION_GUIDE (#900)"
-    original_author: Tanya Sinha <sinha.tanya26@gmail.com>
-    base_generation: 6123049f4ae684b09b5bfb8da5ed607adc6f871d
-    files:
-      - v3_MIGRATION_GUIDE.md
-    patch_content: |
-      diff --git a/MIGRATION_GUIDE.md b/MIGRATION_GUIDE.md
-      deleted file mode 100644
-      index 9d98602c..00000000
-      --- a/MIGRATION_GUIDE.md
-      +++ /dev/null
-      @@ -1,369 +0,0 @@
-      -# V3 Migration Guide
-      -
-      -A guide to migrating the Auth0 Java SDK from `v2` to `v3`.
-      -
-      -- [Overall changes](#overall-changes)
-      -    - [Java versions](#java-versions)
-      -    - [Authentication API](#authentication-api)
-      -    - [Management API](#management-api)
-      -- [Specific changes to the Management API](#specific-changes-to-the-management-api)
-      -    - [Client initialization](#client-initialization)
-      -    - [Sub-client organization](#sub-client-organization)
-      -    - [Request and response patterns](#request-and-response-patterns)
-      -    - [Pagination](#pagination)
-      -    - [Exception handling](#exception-handling)
-      -    - [Accessing raw HTTP responses](#accessing-raw-http-responses)
-      -    - [Request-level configuration](#request-level-configuration)
-      -    - [Type changes](#type-changes)
-      -
-      -## Overall changes
-      -
-      -### Java versions
-      -
-      -Both v2 and v3 require Java 8 or above.
-      -
-      -### Authentication API
-      -
-      -This major version change does not affect the Authentication API. The `AuthAPI` class has been ported directly from v2 to v3. Any code written for the Authentication API in the v2 version should work in the v3 version.
-      -
-      -```java
-      -// Works in both v2 and v3
-      -AuthAPI auth = AuthAPI.newBuilder("{YOUR_DOMAIN}", "{YOUR_CLIENT_ID}", "{YOUR_CLIENT_SECRET}").build();
-      -```
-      -
-      -### Management API
-      -
-      -V3 introduces significant improvements to the Management API SDK by migrating to [Fern](https://github.com/fern-api/fern) as the code generation tool. This provides:
-      -
-      -- Better resource grouping with sub-client organization
-      -- Type-safe request and response objects using builder patterns
-      -- Automatic pagination with `SyncPagingIterable<T>`
-      -- Simplified access to HTTP response metadata via `withRawResponse()`
-      -- Consistent method naming (`list`, `create`, `get`, `update`, `delete`)
-      -
-      -## Specific changes to the Management API
-      -
-      -### Client initialization
-      -
-      -The Management API client initialization has changed from `ManagementAPI` to `ManagementApi`, and uses a different builder pattern.
-      -
-      -**v2:**
-      -```java
-      -import com.auth0.client.mgmt.ManagementAPI;
-      -
-      -// Using domain and token
-      -ManagementAPI mgmt = ManagementAPI.newBuilder("{YOUR_DOMAIN}", "{YOUR_API_TOKEN}").build();
-      -
-      -// Using TokenProvider
-      -TokenProvider tokenProvider = SimpleTokenProvider.create("{YOUR_API_TOKEN}");
-      -ManagementAPI mgmt = ManagementAPI.newBuilder("{YOUR_DOMAIN}", tokenProvider).build();
-      -```
-      -
-      -**v3:**
-      -1st Approach : Standard Token-Based
-      -```java
-      -import com.auth0.client.mgmt.ManagementApi;
-      -
-      -ManagementApi client = ManagementApi
-      -    .builder()
-      -    .url("https://{YOUR_DOMAIN}/api/v2")
-      -    .token("{YOUR_API_TOKEN}")
-      -    .build();
-      -```
-      -
-      -or
-      -
-      -2nd Approach : OAuth client credentials flow
-      -
-      -```java
-      -OAuthTokenSupplier tokenSupplier = new OAuthTokenSupplier(
-      -"{CLIENT_ID}",
-      -"{CLIENT_SECRET}",
-      -"https://{YOUR_DOMAIN}",
-      -"{YOUR_AUDIENCE}"
-      -);
-      -
-      -ClientOptions clientOptions = ClientOptions.builder()
-      -.environment(Environment.custom("https://{YOUR_AUDIENCE}"))
-      -.addHeader("Authorization", () -> "Bearer " + tokenSupplier.get())
-      -.build();
-      -
-      -ManagementApi client = new ManagementApi(clientOptions);
-      -
-      -```
-      -
-      -#### Builder options comparison
-      -
-      -| Option | v2 | v3 |
-      -|--------|----|----|
-      -| Domain/URL | `newBuilder(domain, token)` | `.url("https://domain/api/v2")` |
-      -| Token | Constructor parameter | `.token(token)` |
-      -| Timeout | Via `HttpOptions` | `.timeout(seconds)` |
-      -| Max retries | Via `HttpOptions` | `.maxRetries(count)` |
-      -| Custom HTTP client | `.withHttpClient(Auth0HttpClient)` | `.httpClient(OkHttpClient)` |
-      -| Custom headers | Not directly supported | `.addHeader(name, value)` |
-      -
-      -### Sub-client organization
-      -
-      -V3 introduces a hierarchical sub-client structure. Operations on related resources are now accessed through nested clients instead of methods on a flat entity class.
-      -
-      -**v2:**
-      -```java
-      -// All user operations on UsersEntity
-      -Request<User> userRequest = mgmt.users().get("user_id", new UserFilter());
-      -Request<List<Permission>> permissionsRequest = mgmt.users().getPermissions("user_id", new PermissionsFilter());
-      -Request<List<Role>> rolesRequest = mgmt.users().getRoles("user_id", new RolesFilter());
-      -Request<LogEventsPage> logsRequest = mgmt.users().getLogEvents("user_id", new LogEventFilter());
-      -```
-      -
-      -**v3:**
-      -```java
-      -// Operations organized into sub-clients
-      -GetUserResponseContent user = client.users().get("user_id");
-      -SyncPagingIterable<Permission> permissions = client.users().permissions().list("user_id");
-      -SyncPagingIterable<Role> roles = client.users().roles().list("user_id");
-      -SyncPagingIterable<LogEvent> logs = client.users().logs().list("user_id");
-      -```
-      -
-      -#### Common sub-client mappings
-      -
-      -| v2 Method | v3 Sub-client |
-      -|-----------|---------------|
-      -| `mgmt.users().getPermissions()` | `client.users().permissions().list()` |
-      -| `mgmt.users().getRoles()` | `client.users().roles().list()` |
-      -| `mgmt.users().getLogEvents()` | `client.users().logs().list()` |
-      -| `mgmt.users().getOrganizations()` | `client.users().organizations().list()` |
-      -| `mgmt.users().link()` | `client.users().identities().link()` |
-      -| `mgmt.users().unlink()` | `client.users().identities().delete()` |
-      -| `mgmt.users().deleteMultifactorProvider()` | `client.users().multifactor().deleteProvider()` |
-      -| `mgmt.organizations().getMembers()` | `client.organizations().members().list()` |
-      -| `mgmt.organizations().getInvitations()` | `client.organizations().invitations().list()` |
-      -| `mgmt.organizations().getEnabledConnections()` | `client.organizations().enabledConnections().list()` |
-      -| `mgmt.actions().getVersions()` | `client.actions().versions().list()` |
-      -| `mgmt.actions().getTriggerBindings()` | `client.actions().triggers().bindings().list()` |
-      -| `mgmt.guardian().getFactors()` | `client.guardian().factors().list()` |
-      -| `mgmt.branding().getUniversalLoginTemplate()` | `client.branding().templates().getUniversalLogin()` |
-      -| `mgmt.connections().getScimConfiguration()` | `client.connections().scimConfiguration().get()` |
-      -
-      -### Request and response patterns
-      -
-      -V3 uses type-safe request content objects with builders instead of domain objects or filter parameters.
-      -
-      -**v2:**
-      -```java
-      -import com.auth0.json.mgmt.users.User;
-      -import com.auth0.net.Request;
-      -
-      -// Creating a user
-      -User user = new User("Username-Password-Authentication");
-      -user.setEmail("test@example.com");
-      -user.setPassword("password123".toCharArray());
-      -
-      -Request<User> request = mgmt.users().create(user);
-      -User createdUser = request.execute().getBody();
-      -```
-      -
-      -**v3:**
-      -```java
-      -import com.auth0.client.mgmt.types.CreateUserRequestContent;
-      -import com.auth0.client.mgmt.types.CreateUserResponseContent;
-      -
-      -// Creating a user
-      -CreateUserResponseContent user = client.users().create(
-      -    CreateUserRequestContent
-      -        .builder()
-      -        .connection("Username-Password-Authentication")
-      -        .email("test@example.com")
-      -        .password("password123")
-      -        .build()
-      -);
-      -```
-      -
-      -#### Key differences
-      -
-      -| Aspect | v2 | v3 |
-      -|--------|----|----|
-      -| Request building | Domain objects with setters | Builder pattern with `*RequestContent` types |
-      -| Response type | `Request<T>` requiring `.execute().getBody()` | Direct return of response object |
-      -| Filtering | Filter classes (e.g., `UserFilter`) | `*RequestParameters` builder classes |
-      -| Execution | Explicit `.execute()` call | Implicit execution on method call |
-      -
-      -### Pagination
-      -
-      -V3 introduces `SyncPagingIterable<T>` for automatic pagination, replacing the manual `Request<Page>` pattern.
-      -
-      -**v2:**
-      -```java
-      -import com.auth0.json.mgmt.users.UsersPage;
-      -import com.auth0.client.mgmt.filter.UserFilter;
-      -
-      -Request<UsersPage> request = mgmt.users().list(new UserFilter().withPage(0, 50));
-      -UsersPage page = request.execute().getBody();
-      -
-      -for (User user : page.getItems()) {
-      -    System.out.println(user.getEmail());
-      -}
-      -
-      -// Manual pagination
-      -while (page.getNext() != null) {
-      -    request = mgmt.users().list(new UserFilter().withPage(page.getNext(), 50));
-      -    page = request.execute().getBody();
-      -    for (User user : page.getItems()) {
-      -        System.out.println(user.getEmail());
-      -    }
-      -}
-      -```
-      -
-      -**v3:**
-      -```java
-      -import com.auth0.client.mgmt.core.SyncPagingIterable;
-      -import com.auth0.client.mgmt.types.UserResponseSchema;
-      -import com.auth0.client.mgmt.types.ListUsersRequestParameters;
-      -
-      -// Automatic iteration through all pages
-      -SyncPagingIterable<UserResponseSchema> users = client.users().list(
-      -    ListUsersRequestParameters
-      -        .builder()
-      -        .perPage(50)
-      -        .build()
-      -);
-      -
-      -for (UserResponseSchema user : users) {
-      -    System.out.println(user.getEmail());
-      -}
-      -
-      -// Or manual page control
-      -List<UserResponseSchema> pageItems = users.getItems();
-      -while (users.hasNext()) {
-      -    pageItems = users.nextPage().getItems();
-      -    // process page
-      -}
-      -```
-      -
-      -### Exception handling
-      -
-      -V3 uses a unified `ManagementApiException` class instead of the v2 exception hierarchy.
-      -
-      -**v2:**
-      -```java
-      -import com.auth0.exception.Auth0Exception;
-      -import com.auth0.exception.APIException;
-      -import com.auth0.exception.RateLimitException;
-      -
-      -try {
-      -    User user = mgmt.users().get("user_id", null).execute().getBody();
-      -} catch (RateLimitException e) {
-      -    // Rate limited
-      -    long retryAfter = e.getLimit();
-      -} catch (APIException e) {
-      -    int statusCode = e.getStatusCode();
-      -    String error = e.getError();
-      -    String description = e.getDescription();
-      -} catch (Auth0Exception e) {
-      -    // Network or other errors
-      -}
-      -```
-      -
-      -**v3:**
-      -```java
-      -import com.auth0.client.mgmt.core.ManagementApiException;
-      -
-      -try {
-      -    GetUserResponseContent user = client.users().get("user_id");
-      -} catch (ManagementApiException e) {
-      -    int statusCode = e.statusCode();
-      -    Object body = e.body();
-      -    Map<String, List<String>> headers = e.headers();
-      -    String message = e.getMessage();
-      -}
-      -```
-      -
-      -### Accessing raw HTTP responses
-      -
-      -V3 provides access to full HTTP response metadata via `withRawResponse()`.
-      -
-      -**v2:**
-      -```java
-      -// Response wrapper provided status code
-      -Response<User> response = mgmt.users().get("user_id", null).execute();
-      -int statusCode = response.getStatusCode();
-      -User user = response.getBody();
-      -```
-      -
-      -**v3:**
-      -```java
-      -import com.auth0.client.mgmt.core.ManagementApiHttpResponse;
-      -
-      -// Use withRawResponse() to access headers and metadata
-      -ManagementApiHttpResponse<GetUserResponseContent> response = client.users()
-      -    .withRawResponse()
-      -    .get("user_id");
-      -
-      -GetUserResponseContent user = response.body();
-      -Map<String, List<String>> headers = response.headers();
-      -```
-      -
-      -### Request-level configuration
-      -
-      -V3 allows per-request configuration through `RequestOptions`.
-      -
-      -**v2:**
-      -```java
-      -// Most configuration was at client level only
-      -// Request-level headers required creating a new request manually
-      -Request<User> request = mgmt.users().get("user_id", null);
-      -request.addHeader("X-Custom-Header", "value");
-      -User user = request.execute().getBody();
-      -```
-      -
-      -**v3:**
-      -```java
-      -import com.auth0.client.mgmt.core.RequestOptions;
-      -
-      -GetUserResponseContent user = client.users().get(
-      -    "user_id",
-      -    GetUserRequestParameters.builder().build(),
-      -    RequestOptions.builder()
-      -        .timeout(10)
-      -        .maxRetries(1)
-      -        .addHeader("X-Custom-Header", "value")
-      -        .build()
-      -);
-      -```
-      -
-      -### Type changes
-      -
-      -V3 uses generated type classes located in `com.auth0.client.mgmt.types` instead of the hand-written POJOs in `com.auth0.json.mgmt`.
-      -
-      -**v2:**
-      -```java
-      -import com.auth0.json.mgmt.users.User;
-      -import com.auth0.json.mgmt.roles.Role;
-      -import com.auth0.json.mgmt.organizations.Organization;
-      -```
-      -
-      -**v3:**
-      -```java
-      -import com.auth0.client.mgmt.types.UserResponseSchema;
-      -import com.auth0.client.mgmt.types.CreateUserRequestContent;
-      -import com.auth0.client.mgmt.types.CreateUserResponseContent;
-      -import com.auth0.client.mgmt.types.Role;
-      -import com.auth0.client.mgmt.types.Organization;
-      -```
-      -
-      -Type naming conventions in v3:
-      -- Request body types: `*RequestContent` (e.g., `CreateUserRequestContent`)
-      -- Response types: `*ResponseContent` or `*ResponseSchema` (e.g., `GetUserResponseContent`, `UserResponseSchema`)
-      -- Query parameters: `*RequestParameters` (e.g., `ListUsersRequestParameters`)
-      -
-      -All types use immutable builders:
-      -
-      -```java
-      -// v3 type construction
-      -CreateUserRequestContent request = CreateUserRequestContent
-      -    .builder()
-      -    .connection("Username-Password-Authentication")
-      -    .email("test@example.com")
-      -    .password("secure-password")
-      -    .build();
-      -```
-    user_owned: true
+  - commit_sha: 97f94ce5dd517846f1fd30ae84791654a7da96bd
+    tree_hash: 85ae2235f756976f1a0eee80d27fcf579579bdfc
+    timestamp: 2026-08-04T06:33:07.487Z
+    cli_version: unknown
+    generator_versions:
+      fernapi/fern-java-sdk: 4.11.1
+current_generation: 97f94ce5dd517846f1fd30ae84791654a7da96bd
+patches: []
diff --git a/reference.md b/reference.md
index 647fa3fc..e9bb0d75 100644
--- a/reference.md
+++ b/reference.md
@@ -590,8 +590,8 @@ client.actions().test(
 </dl>
 </details>
 
-## Branding
-<details><summary><code>client.branding.get() -> GetBrandingResponseContent</code></summary>
+## Agents
+<details><summary><code>client.agents.list() -> SyncPagingIterable&amp;lt;AgentResponseContent&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -603,7 +603,7 @@ client.actions().test(
 <dl>
 <dd>
 
-Retrieve branding settings.
+Get agents
 </dd>
 </dl>
 </dd>
@@ -618,19 +618,48 @@ Retrieve branding settings.
 <dd>
 
 ```java
-client.branding().get();
+client.agents().list(
+    ListAgentsRequestParameters
+        .builder()
+        .from("from")
+        .take(1)
+        .build()
+);
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**from:** `Optional<String>` — Optional Id from which to start selection.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
 
 </dd>
 </dl>
 </details>
 
-<details><summary><code>client.branding.update(request) -> UpdateBrandingResponseContent</code></summary>
+<details><summary><code>client.agents.create(request) -> AgentResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -642,7 +671,7 @@ client.branding().get();
 <dl>
 <dd>
 
-Update branding settings.
+Create an agent
 </dd>
 </dl>
 </dd>
@@ -657,9 +686,10 @@ Update branding settings.
 <dd>
 
 ```java
-client.branding().update(
-    UpdateBrandingRequestContent
+client.agents().create(
+    CreateAgentRequestContent
         .builder()
+        .name("name")
         .build()
 );
 ```
@@ -676,7 +706,7 @@ client.branding().update(
 <dl>
 <dd>
 
-**colors:** `Optional<UpdateBrandingColors>` 
+**name:** `String` — The agent name. Cannot contain <, >, or null bytes.
     
 </dd>
 </dl>
@@ -684,7 +714,7 @@ client.branding().update(
 <dl>
 <dd>
 
-**faviconUrl:** `Optional<String>` — URL for the favicon. Must use HTTPS.
+**clientId:** `Optional<String>` — Optional client ID to associate with the agent
     
 </dd>
 </dl>
@@ -692,7 +722,7 @@ client.branding().update(
 <dl>
 <dd>
 
-**logoUrl:** `Optional<String>` — URL for the logo. Must use HTTPS.
+**externalAgentId:** `Optional<String>` — Optional external identifier for the agent. Immutable after creation. Must be unique within the tenant.
     
 </dd>
 </dl>
@@ -700,7 +730,7 @@ client.branding().update(
 <dl>
 <dd>
 
-**font:** `Optional<UpdateBrandingFont>` 
+**metadata:** `Optional<Map<String, Object>>` 
     
 </dd>
 </dl>
@@ -712,8 +742,7 @@ client.branding().update(
 </dl>
 </details>
 
-## ClientGrants
-<details><summary><code>client.clientGrants.list() -> SyncPagingIterable&amp;lt;ClientGrantResponseContent&amp;gt;</code></summary>
+<details><summary><code>client.agents.read(id) -> AgentResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -725,7 +754,7 @@ client.branding().update(
 <dl>
 <dd>
 
-Retrieve a list of [client grants](https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants), including the scopes associated with the application/API pair.
+Get an agent
 </dd>
 </dl>
 </dd>
@@ -740,18 +769,7 @@ Retrieve a list of [client grants](https://auth0.com/docs/get-started/applicatio
 <dd>
 
 ```java
-client.clientGrants().list(
-    ListClientGrantsRequestParameters
-        .builder()
-        .from("from")
-        .take(1)
-        .audience("audience")
-        .clientId("client_id")
-        .allowAnyOrganization(true)
-        .subjectType(ClientGrantSubjectTypeEnum.CLIENT)
-        .defaultFor(ClientGrantDefaultForEnum.THIRD_PARTY_CLIENTS)
-        .build()
-);
+client.agents().read("id");
 ```
 </dd>
 </dl>
@@ -766,55 +784,61 @@ client.clientGrants().list(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Optional Id from which to start selection.
+**id:** `String` — The agent ID
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.agents.delete(id)</code></summary>
 <dl>
 <dd>
 
-**audience:** `Optional<String>` — Optional filter on audience.
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**clientId:** `Optional<String>` — Optional filter on client_id.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**allowAnyOrganization:** `Optional<Boolean>` — Optional filter on allow_any_organization.
-    
+Delete an agent
 </dd>
 </dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
 
 <dl>
 <dd>
 
-**subjectType:** `Optional<ClientGrantSubjectTypeEnum>` — The type of application access the client grant allows.
-    
+<dl>
+<dd>
+
+```java
+client.agents().delete("id");
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**defaultFor:** `Optional<ClientGrantDefaultForEnum>` — Applies this client grant as the default for all clients in the specified group. The only accepted value is <a href="https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants#default-permissions-for-third-party-applications">`third_party_clients`</a>, which applies the grant to all third-party clients. Per-client grants for the same audience take precedence. Mutually exclusive with `client_id`.
+<dl>
+<dd>
+
+**id:** `String` — The agent ID
     
 </dd>
 </dl>
@@ -826,7 +850,7 @@ client.clientGrants().list(
 </dl>
 </details>
 
-<details><summary><code>client.clientGrants.create(request) -> CreateClientGrantResponseContent</code></summary>
+<details><summary><code>client.agents.update(id, request) -> AgentResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -838,7 +862,7 @@ client.clientGrants().list(
 <dl>
 <dd>
 
-Create a client grant for a machine-to-machine login flow. To learn more, read [Client Credential Flow](https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow).
+Update an agent
 </dd>
 </dl>
 </dd>
@@ -853,10 +877,10 @@ Create a client grant for a machine-to-machine login flow. To learn more, read [
 <dd>
 
 ```java
-client.clientGrants().create(
-    CreateClientGrantRequestContent
+client.agents().update(
+    "id",
+    PatchAgentRequestParameters
         .builder()
-        .audience("audience")
         .build()
 );
 ```
@@ -873,7 +897,7 @@ client.clientGrants().create(
 <dl>
 <dd>
 
-**clientId:** `Optional<String>` — ID of the client.
+**id:** `String` — The agent ID
     
 </dd>
 </dl>
@@ -881,7 +905,7 @@ client.clientGrants().create(
 <dl>
 <dd>
 
-**audience:** `String` — The audience (API identifier) of this client grant
+**name:** `Optional<String>` — The agent name. Cannot contain <, >, or null bytes.
     
 </dd>
 </dl>
@@ -889,56 +913,48 @@ client.clientGrants().create(
 <dl>
 <dd>
 
-**defaultFor:** `Optional<ClientGrantDefaultForEnum>` 
+**metadata:** `Optional<Map<String, Object>>` — Arbitrary key-value metadata for the agent. Pass null to clear all metadata.
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**organizationUsage:** `Optional<ClientGrantOrganizationUsageEnum>` 
-    
 </dd>
 </dl>
+</details>
 
+## Branding
+<details><summary><code>client.branding.get() -> GetBrandingResponseContent</code></summary>
 <dl>
 <dd>
 
-**allowAnyOrganization:** `Optional<Boolean>` — If enabled, any organization can be used with this grant. If disabled (default), the grant must be explicitly assigned to the desired organizations.
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**scope:** `Optional<List<String>>` — Scopes allowed for this client grant.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**subjectType:** `Optional<ClientGrantSubjectTypeEnum>` 
-    
+Retrieve branding settings.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**authorizationDetailsTypes:** `Optional<List<String>>` — Types of authorization_details allowed for this client grant.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**allowAllScopes:** `Optional<Boolean>` — If enabled, all scopes configured on the resource server are allowed for this grant.
-    
+```java
+client.branding().get();
+```
 </dd>
 </dl>
 </dd>
@@ -949,7 +965,7 @@ client.clientGrants().create(
 </dl>
 </details>
 
-<details><summary><code>client.clientGrants.get(id) -> GetClientGrantResponseContent</code></summary>
+<details><summary><code>client.branding.update(request) -> UpdateBrandingResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -961,8 +977,7 @@ client.clientGrants().create(
 <dl>
 <dd>
 
-Retrieve a single [client grant](https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants), including the
-scopes associated with the application/API pair.
+Update branding settings.
 </dd>
 </dl>
 </dd>
@@ -977,7 +992,11 @@ scopes associated with the application/API pair.
 <dd>
 
 ```java
-client.clientGrants().get("id");
+client.branding().update(
+    UpdateBrandingRequestContent
+        .builder()
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -992,61 +1011,31 @@ client.clientGrants().get("id");
 <dl>
 <dd>
 
-**id:** `String` — The ID of the client grant to retrieve.
+**colors:** `Optional<UpdateBrandingColors>` 
     
 </dd>
 </dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.clientGrants.delete(id)</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
 
 <dl>
 <dd>
 
-Delete the [Client Credential Flow](https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow) from your machine-to-machine application.
-</dd>
-</dl>
+**faviconUrl:** `Optional<String>` — URL for the favicon. Must use HTTPS.
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
-<dl>
-<dd>
-
-```java
-client.clientGrants().delete("id");
-```
-</dd>
-</dl>
+**logoUrl:** `Optional<String>` — URL for the logo. Must use HTTPS.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
-<dl>
-<dd>
-
-**id:** `String` — ID of the client grant to delete.
+**font:** `Optional<UpdateBrandingFont>` 
     
 </dd>
 </dl>
@@ -1058,7 +1047,8 @@ client.clientGrants().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.clientGrants.update(id, request) -> UpdateClientGrantResponseContent</code></summary>
+## ClientGrants
+<details><summary><code>client.clientGrants.list() -> SyncPagingIterable&amp;lt;ClientGrantResponseContent&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -1070,7 +1060,7 @@ client.clientGrants().delete("id");
 <dl>
 <dd>
 
-Update a client grant.
+Retrieve a list of [client grants](https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants), including the scopes associated with the application/API pair.
 </dd>
 </dl>
 </dd>
@@ -1085,10 +1075,17 @@ Update a client grant.
 <dd>
 
 ```java
-client.clientGrants().update(
-    "id",
-    UpdateClientGrantRequestContent
+client.clientGrants().list(
+    ListClientGrantsRequestParameters
         .builder()
+        .includeTotals(true)
+        .from("from")
+        .take(1)
+        .audience("audience")
+        .clientId("client_id")
+        .allowAnyOrganization(true)
+        .subjectType(ClientGrantSubjectTypeEnum.CLIENT)
+        .defaultFor(ClientGrantDefaultForEnum.THIRD_PARTY_CLIENTS)
         .build()
 );
 ```
@@ -1105,7 +1102,7 @@ client.clientGrants().update(
 <dl>
 <dd>
 
-**id:** `String` — ID of the client grant to update.
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
     
 </dd>
 </dl>
@@ -1113,7 +1110,7 @@ client.clientGrants().update(
 <dl>
 <dd>
 
-**scope:** `Optional<List<String>>` — Scopes allowed for this client grant.
+**from:** `Optional<String>` — Optional Id from which to start selection.
     
 </dd>
 </dl>
@@ -1121,7 +1118,7 @@ client.clientGrants().update(
 <dl>
 <dd>
 
-**organizationUsage:** `Optional<ClientGrantOrganizationNullableUsageEnum>` 
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
     
 </dd>
 </dl>
@@ -1129,7 +1126,7 @@ client.clientGrants().update(
 <dl>
 <dd>
 
-**allowAnyOrganization:** `Optional<Boolean>` — Controls allowing any organization to be used with this grant
+**audience:** `Optional<String>` — Optional filter on audience.
     
 </dd>
 </dl>
@@ -1137,7 +1134,7 @@ client.clientGrants().update(
 <dl>
 <dd>
 
-**authorizationDetailsTypes:** `Optional<List<String>>` — Types of authorization_details allowed for this client grant.
+**clientId:** `Optional<String>` — Optional filter on client_id.
     
 </dd>
 </dl>
@@ -1145,7 +1142,23 @@ client.clientGrants().update(
 <dl>
 <dd>
 
-**allowAllScopes:** `Optional<Boolean>` — If enabled, all scopes configured on the resource server are allowed for this grant.
+**allowAnyOrganization:** `Optional<Boolean>` — Optional filter on allow_any_organization.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**subjectType:** `Optional<ClientGrantSubjectTypeEnum>` — The type of application access the client grant allows.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**defaultFor:** `Optional<ClientGrantDefaultForEnum>` — Applies this client grant as the default for all clients in the specified group. The only accepted value is <a href="https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants#default-permissions-for-third-party-applications">`third_party_clients`</a>, which applies the grant to all third-party clients. Per-client grants for the same audience take precedence. Mutually exclusive with `client_id`.
     
 </dd>
 </dl>
@@ -1157,8 +1170,7 @@ client.clientGrants().update(
 </dl>
 </details>
 
-## Clients
-<details><summary><code>client.clients.list() -> SyncPagingIterable&amp;lt;Client&amp;gt;</code></summary>
+<details><summary><code>client.clientGrants.create(request) -> CreateClientGrantResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -1170,35 +1182,11 @@ client.clientGrants().update(
 <dl>
 <dd>
 
-Retrieve clients (applications and SSO integrations) matching provided filters. A list of fields to include or exclude may also be specified.
-For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
-
-- The following can be retrieved with any scope:
-    `client_id`, `app_type`, `name`, and `description`.
-- The following properties can only be retrieved with the `read:clients` or
-    `read:client_keys` scope:
-    `callbacks`, `oidc_logout`, `allowed_origins`,
-    `web_origins`, `tenant`, `global`, `config_route`,
-    `callback_url_template`, `jwt_configuration`,
-    `jwt_configuration.lifetime_in_seconds`, `jwt_configuration.secret_encoded`,
-    `jwt_configuration.scopes`, `jwt_configuration.alg`, `api_type`,
-    `logo_uri`, `allowed_clients`, `owners`, `custom_login_page`,
-    `custom_login_page_off`, `sso`, `addons`, `form_template`,
-    `custom_login_page_codeview`, `resource_servers`, `client_metadata`,
-    `mobile`, `mobile.android`, `mobile.ios`, `allowed_logout_urls`,
-    `token_endpoint_auth_method`, `is_first_party`, `oidc_conformant`,
-    `is_token_endpoint_ip_header_trusted`, `initiate_login_uri`, `grant_types`,
-    `refresh_token`, `refresh_token.rotation_type`, `refresh_token.expiration_type`,
-    `refresh_token.leeway`, `refresh_token.token_lifetime`, `refresh_token.policies`, `organization_usage`,
-    `organization_require_behavior`.
-- The following properties can only be retrieved with the
-    `read:client_keys` or `read:client_credentials` scope:
-    `encryption_key`, `encryption_key.pub`, `encryption_key.cert`,
-    `client_secret`, `client_authentication_methods` and `signing_key`.
-</dd>
-</dl>
-</dd>
-</dl>
+Create a client grant for a machine-to-machine login flow. To learn more, read [Client Credential Flow](https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow).
+</dd>
+</dl>
+</dd>
+</dl>
 
 #### 🔌 Usage
 
@@ -1209,19 +1197,10 @@ For more information, read [Applications in Auth0](https://www.auth0.com/docs/ge
 <dd>
 
 ```java
-client.clients().list(
-    ListClientsRequestParameters
+client.clientGrants().create(
+    CreateClientGrantRequestContent
         .builder()
-        .fields("fields")
-        .includeFields(true)
-        .page(1)
-        .perPage(1)
-        .includeTotals(true)
-        .isGlobal(true)
-        .isFirstParty(true)
-        .appType("app_type")
-        .externalClientId("external_client_id")
-        .q("q")
+        .audience("audience")
         .build()
 );
 ```
@@ -1238,15 +1217,7 @@ client.clients().list(
 <dl>
 <dd>
 
-**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
+**clientId:** `Optional<String>` — ID of the client.
     
 </dd>
 </dl>
@@ -1254,7 +1225,7 @@ client.clients().list(
 <dl>
 <dd>
 
-**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
+**audience:** `String` — The audience (API identifier) of this client grant
     
 </dd>
 </dl>
@@ -1262,7 +1233,7 @@ client.clients().list(
 <dl>
 <dd>
 
-**perPage:** `Optional<Integer>` — Number of results per page. Default value is 50, maximum value is 100
+**defaultFor:** `Optional<ClientGrantDefaultForEnum>` 
     
 </dd>
 </dl>
@@ -1270,7 +1241,7 @@ client.clients().list(
 <dl>
 <dd>
 
-**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+**organizationUsage:** `Optional<ClientGrantOrganizationUsageEnum>` 
     
 </dd>
 </dl>
@@ -1278,7 +1249,7 @@ client.clients().list(
 <dl>
 <dd>
 
-**isGlobal:** `Optional<Boolean>` — Optional filter on the global client parameter.
+**allowAnyOrganization:** `Optional<Boolean>` — If enabled, any organization can be used with this grant. If disabled (default), the grant must be explicitly assigned to the desired organizations.
     
 </dd>
 </dl>
@@ -1286,7 +1257,7 @@ client.clients().list(
 <dl>
 <dd>
 
-**isFirstParty:** `Optional<Boolean>` — Optional filter on whether or not a client is a first-party client.
+**scope:** `Optional<List<String>>` — Scopes allowed for this client grant.
     
 </dd>
 </dl>
@@ -1294,7 +1265,7 @@ client.clients().list(
 <dl>
 <dd>
 
-**appType:** `Optional<String>` — Optional filter by a comma-separated list of application types.
+**subjectType:** `Optional<ClientGrantSubjectTypeEnum>` 
     
 </dd>
 </dl>
@@ -1302,7 +1273,7 @@ client.clients().list(
 <dl>
 <dd>
 
-**externalClientId:** `Optional<String>` — Optional filter by the <a href="https://drafts.oauth.net/draft-ietf-oauth-client-id-metadata-document/draft-ietf-oauth-client-id-metadata-document.html">Client ID Metadata Document</a> URI for CIMD-registered clients.
+**authorizationDetailsTypes:** `Optional<List<String>>` — Types of authorization_details allowed for this client grant.
     
 </dd>
 </dl>
@@ -1310,7 +1281,7 @@ client.clients().list(
 <dl>
 <dd>
 
-**q:** `Optional<String>` — Advanced Query in <a href="https://lucene.apache.org/core/2_9_4/queryparsersyntax.html">Lucene</a> syntax.<br /><b>Permitted Queries</b>:<br /><ul><li><i>client_grant.organization_id:{organization_id}</i></li><li><i>client_grant.allow_any_organization:true</i></li></ul><b>Additional Restrictions</b>:<br /><ul><li>Cannot be used in combination with other filters</li><li>Requires use of the <i>from</i> and <i>take</i> paging parameters (checkpoint paginatinon)</li><li>Reduced rate limits apply. See <a href="https://auth0.com/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public">Rate Limit Configurations</a></li></ul><i><b>Note</b>: Recent updates may not be immediately reflected in query results</i>
+**allowAllScopes:** `Optional<Boolean>` — If enabled, all scopes configured on the resource server are allowed for this grant.
     
 </dd>
 </dl>
@@ -1322,7 +1293,7 @@ client.clients().list(
 </dl>
 </details>
 
-<details><summary><code>client.clients.create(request) -> CreateClientResponseContent</code></summary>
+<details><summary><code>client.clientGrants.get(id) -> GetClientGrantResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -1334,20 +1305,8 @@ client.clients().list(
 <dl>
 <dd>
 
-Create a new client (application or SSO integration). For more information, read [Create Applications](https://www.auth0.com/docs/get-started/auth0-overview/create-applications)
-[API Endpoints for Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on/api-endpoints-for-single-sign-on).
-
-Notes: 
-- We recommend leaving the `client_secret` parameter unspecified to allow the generation of a safe secret.
-- The `client_authentication_methods` and `token_endpoint_auth_method` properties are mutually exclusive. Use 
-`client_authentication_methods` to configure the client with Private Key JWT authentication method. Otherwise, use `token_endpoint_auth_method`
-to configure the client with client secret (basic or post) or with no authentication method (none).
-- When using `client_authentication_methods` to configure the client with Private Key JWT authentication method, specify fully defined credentials. 
-These credentials will be automatically enabled for Private Key JWT authentication on the client. 
-- To configure `client_authentication_methods`, the `create:client_credentials` scope is required.
-- To configure `client_authentication_methods`, the property `jwt_configuration.alg` must be set to RS256.
-
-SSO Integrations created via this endpoint will accept login requests and share user profile information.
+Retrieve a single [client grant](https://auth0.com/docs/get-started/applications/application-access-to-apis-client-grants), including the
+scopes associated with the application/API pair.
 </dd>
 </dl>
 </dd>
@@ -1362,12 +1321,7 @@ SSO Integrations created via this endpoint will accept login requests and share
 <dd>
 
 ```java
-client.clients().create(
-    CreateClientRequestContent
-        .builder()
-        .name("name")
-        .build()
-);
+client.clientGrants().get("id");
 ```
 </dd>
 </dl>
@@ -1382,199 +1336,120 @@ client.clients().create(
 <dl>
 <dd>
 
-**name:** `String` — Name of this client (min length: 1 character, does not allow `<` or `>`).
+**id:** `String` — The ID of the client grant to retrieve.
     
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**description:** `Optional<String>` — Free text description of this client (max length: 140 characters).
-    
 </dd>
 </dl>
 
-<dl>
-<dd>
 
-**logoUri:** `Optional<String>` — URL of the logo to display for this client. Recommended size is 150x150 pixels.
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.clientGrants.delete(id)</code></summary>
 <dl>
 <dd>
 
-**callbacks:** `Optional<List<String>>` — Comma-separated list of URLs whitelisted for Auth0 to use as a callback to the client after authentication.
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**oidcLogout:** `Optional<ClientOidcBackchannelLogoutSettings>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**oidcBackchannelLogout:** `Optional<ClientOidcBackchannelLogoutSettings>` — Configuration for OIDC backchannel logout (deprecated, in favor of oidc_logout)
-    
+Delete the [Client Credential Flow](https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow) from your machine-to-machine application.
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**sessionTransfer:** `Optional<ClientSessionTransferConfiguration>` 
-    
 </dd>
 </dl>
 
-<dl>
-<dd>
-
-**allowedOrigins:** `Optional<List<String>>` — Comma-separated list of URLs allowed to make requests from JavaScript to Auth0 API (typically used with CORS). By default, all your callback URLs will be allowed. This field allows you to enter other origins if necessary. You can also use wildcards at the subdomain level (e.g., https://*.contoso.com). Query strings and hash information are not taken into account when validating these URLs.
-    
-</dd>
-</dl>
+#### 🔌 Usage
 
 <dl>
 <dd>
 
-**webOrigins:** `Optional<List<String>>` — Comma-separated list of allowed origins for use with <a href='https://auth0.com/docs/cross-origin-authentication'>Cross-Origin Authentication</a>, <a href='https://auth0.com/docs/flows/concepts/device-auth'>Device Flow</a>, and <a href='https://auth0.com/docs/protocols/oauth2#how-response-mode-works'>web message response mode</a>.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**clientAliases:** `Optional<List<String>>` — List of audiences/realms for SAML protocol. Used by the wsfed addon.
-    
+```java
+client.clientGrants().delete("id");
+```
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**allowedClients:** `Optional<List<String>>` — List of allow clients and API ids that are allowed to make delegation requests. Empty means all all your clients are allowed.
-    
 </dd>
 </dl>
 
-<dl>
-<dd>
-
-**allowedLogoutUrls:** `Optional<List<String>>` — Comma-separated list of URLs that are valid to redirect to after logout from Auth0. Wildcards are allowed for subdomains.
-    
-</dd>
-</dl>
+#### ⚙️ Parameters
 
 <dl>
 <dd>
 
-**grantTypes:** `Optional<List<String>>` — List of grant types supported for this application. Can include `authorization_code`, `implicit`, `refresh_token`, `client_credentials`, `password`, `http://auth0.com/oauth/grant-type/password-realm`, `http://auth0.com/oauth/grant-type/mfa-oob`, `http://auth0.com/oauth/grant-type/mfa-otp`, `http://auth0.com/oauth/grant-type/mfa-recovery-code`, `urn:openid:params:grant-type:ciba`, `urn:ietf:params:oauth:grant-type:device_code`, and `urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token`.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**tokenEndpointAuthMethod:** `Optional<ClientTokenEndpointAuthMethodEnum>` 
+**id:** `String` — ID of the client grant to delete.
     
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**isTokenEndpointIpHeaderTrusted:** `Optional<Boolean>` — If true, trust that the IP specified in the `auth0-forwarded-for` header is the end-user's IP for brute-force-protection on token endpoint.
-    
 </dd>
 </dl>
 
-<dl>
-<dd>
 
-**appType:** `Optional<ClientAppTypeEnum>` 
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.clientGrants.update(id, request) -> UpdateClientGrantResponseContent</code></summary>
 <dl>
 <dd>
 
-**isFirstParty:** `Optional<Boolean>` — Whether this client a first party client or not
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**oidcConformant:** `Optional<Boolean>` — Whether this client conforms to <a href='https://auth0.com/docs/api-auth/tutorials/adoption'>strict OIDC specifications</a> (true) or uses legacy features (false).
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**jwtConfiguration:** `Optional<ClientJwtConfiguration>` 
-    
+Update a client grant.
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**encryptionKey:** `Optional<ClientEncryptionKey>` 
-    
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**sso:** `Optional<Boolean>` — Applies only to SSO clients and determines whether Auth0 will handle Single Sign On (true) or whether the Identity Provider will (false).
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**crossOriginAuthentication:** `Optional<Boolean>` — Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false).
-    
+```java
+client.clientGrants().update(
+    "id",
+    UpdateClientGrantRequestContent
+        .builder()
+        .build()
+);
+```
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**crossOriginLoc:** `Optional<String>` — URL of the location in your site where the cross origin verification takes place for the cross-origin auth flow when performing Auth in your own domain instead of Auth0 hosted login page.
-    
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**ssoDisabled:** `Optional<Boolean>` — <code>true</code> to disable Single Sign On, <code>false</code> otherwise (default: <code>false</code>)
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**customLoginPageOn:** `Optional<Boolean>` — <code>true</code> if the custom login page is to be used, <code>false</code> otherwise. Defaults to <code>true</code>
+**id:** `String` — ID of the client grant to update.
     
 </dd>
 </dl>
@@ -1582,7 +1457,7 @@ client.clients().create(
 <dl>
 <dd>
 
-**customLoginPage:** `Optional<String>` — The content (HTML, CSS, JS) of the custom login page.
+**scope:** `Optional<List<String>>` — Scopes allowed for this client grant.
     
 </dd>
 </dl>
@@ -1590,7 +1465,7 @@ client.clients().create(
 <dl>
 <dd>
 
-**customLoginPagePreview:** `Optional<String>` — The content (HTML, CSS, JS) of the custom login page. (Used on Previews)
+**organizationUsage:** `Optional<ClientGrantOrganizationNullableUsageEnum>` 
     
 </dd>
 </dl>
@@ -1598,7 +1473,7 @@ client.clients().create(
 <dl>
 <dd>
 
-**formTemplate:** `Optional<String>` — HTML form template to be used for WS-Federation.
+**allowAnyOrganization:** `Optional<Boolean>` — Controls allowing any organization to be used with this grant
     
 </dd>
 </dl>
@@ -1606,7 +1481,7 @@ client.clients().create(
 <dl>
 <dd>
 
-**addons:** `Optional<ClientAddons>` 
+**authorizationDetailsTypes:** `Optional<List<String>>` — Types of authorization_details allowed for this client grant.
     
 </dd>
 </dl>
@@ -1614,63 +1489,100 @@ client.clients().create(
 <dl>
 <dd>
 
-**clientMetadata:** `Optional<Map<String, Object>>` 
+**allowAllScopes:** `Optional<Boolean>` — If enabled, all scopes configured on the resource server are allowed for this grant.
     
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**mobile:** `Optional<ClientMobile>` 
-    
 </dd>
 </dl>
 
-<dl>
-<dd>
 
-**initiateLoginUri:** `Optional<String>` — Initiate login uri, must be https
-    
 </dd>
 </dl>
+</details>
 
+## Clients
+<details><summary><code>client.clients.list() -> SyncPagingIterable&amp;lt;Client&amp;gt;</code></summary>
 <dl>
 <dd>
 
-**nativeSocialLogin:** `Optional<NativeSocialLogin>` 
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**fedcmLogin:** `Optional<FedCmLogin>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**refreshToken:** `Optional<ClientRefreshTokenConfiguration>` 
-    
+Retrieve clients (applications and SSO integrations) matching provided filters. A list of fields to include or exclude may also be specified.
+For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
+
+- The following can be retrieved with any scope:
+    `client_id`, `app_type`, `name`, and `description`.
+- The following properties can only be retrieved with the `read:clients` or
+    `read:client_keys` scope:
+    `callbacks`, `oidc_logout`, `allowed_origins`,
+    `web_origins`, `tenant`, `global`, `config_route`,
+    `callback_url_template`, `jwt_configuration`,
+    `jwt_configuration.lifetime_in_seconds`, `jwt_configuration.secret_encoded`,
+    `jwt_configuration.scopes`, `jwt_configuration.alg`, `api_type`,
+    `logo_uri`, `allowed_clients`, `owners`, `custom_login_page`,
+    `custom_login_page_off`, `sso`, `addons`, `form_template`,
+    `custom_login_page_codeview`, `resource_servers`, `client_metadata`,
+    `mobile`, `mobile.android`, `mobile.ios`, `allowed_logout_urls`,
+    `token_endpoint_auth_method`, `is_first_party`, `oidc_conformant`,
+    `is_token_endpoint_ip_header_trusted`, `initiate_login_uri`, `grant_types`,
+    `refresh_token`, `refresh_token.rotation_type`, `refresh_token.expiration_type`,
+    `refresh_token.leeway`, `refresh_token.token_lifetime`, `refresh_token.policies`, `organization_usage`,
+    `organization_require_behavior`.
+- The following properties can only be retrieved with the
+    `read:client_keys` or `read:client_credentials` scope:
+    `encryption_key`, `encryption_key.pub`, `encryption_key.cert`,
+    `client_secret`, `client_authentication_methods` and `signing_key`.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**defaultOrganization:** `Optional<ClientDefaultOrganization>` 
-    
+<dl>
+<dd>
+
+```java
+client.clients().list(
+    ListClientsRequestParameters
+        .builder()
+        .fields("fields")
+        .includeFields(true)
+        .page(1)
+        .perPage(1)
+        .includeTotals(true)
+        .isGlobal(true)
+        .isFirstParty(true)
+        .appType("app_type")
+        .externalClientId("external_client_id")
+        .q("q")
+        .build()
+);
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**organizationUsage:** `Optional<ClientOrganizationUsageEnum>` 
+<dl>
+<dd>
+
+**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
     
 </dd>
 </dl>
@@ -1678,7 +1590,7 @@ client.clients().create(
 <dl>
 <dd>
 
-**organizationRequireBehavior:** `Optional<ClientOrganizationRequireBehaviorEnum>` 
+**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
     
 </dd>
 </dl>
@@ -1686,7 +1598,7 @@ client.clients().create(
 <dl>
 <dd>
 
-**organizationDiscoveryMethods:** `Optional<List<ClientOrganizationDiscoveryEnum>>` — Defines the available methods for organization discovery during the `pre_login_prompt`. Users can discover their organization either by `email`, `organization_name` or both.
+**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
     
 </dd>
 </dl>
@@ -1694,7 +1606,7 @@ client.clients().create(
 <dl>
 <dd>
 
-**clientAuthenticationMethods:** `Optional<ClientCreateAuthenticationMethod>` 
+**perPage:** `Optional<Integer>` — Number of results per page. Default value is 50, maximum value is 100
     
 </dd>
 </dl>
@@ -1702,7 +1614,7 @@ client.clients().create(
 <dl>
 <dd>
 
-**requirePushedAuthorizationRequests:** `Optional<Boolean>` — Makes the use of Pushed Authorization Requests mandatory for this client
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
     
 </dd>
 </dl>
@@ -1710,7 +1622,7 @@ client.clients().create(
 <dl>
 <dd>
 
-**requireProofOfPossession:** `Optional<Boolean>` — Makes the use of Proof-of-Possession mandatory for this client
+**isGlobal:** `Optional<Boolean>` — Optional filter on the global client parameter.
     
 </dd>
 </dl>
@@ -1718,7 +1630,7 @@ client.clients().create(
 <dl>
 <dd>
 
-**signedRequestObject:** `Optional<ClientSignedRequestObjectWithPublicKey>` 
+**isFirstParty:** `Optional<Boolean>` — Optional filter on whether or not a client is a first-party client.
     
 </dd>
 </dl>
@@ -1726,7 +1638,7 @@ client.clients().create(
 <dl>
 <dd>
 
-**tokenVaultPrivilegedAccess:** `Optional<ClientTokenVaultPrivilegedAccessWithPublicKey>` 
+**appType:** `Optional<String>` — Optional filter by a comma-separated list of application types.
     
 </dd>
 </dl>
@@ -1734,7 +1646,7 @@ client.clients().create(
 <dl>
 <dd>
 
-**complianceLevel:** `Optional<ClientComplianceLevelEnum>` 
+**externalClientId:** `Optional<String>` — Optional filter by the <a href="https://drafts.oauth.net/draft-ietf-oauth-client-id-metadata-document/draft-ietf-oauth-client-id-metadata-document.html">Client ID Metadata Document</a> URI for CIMD-registered clients.
     
 </dd>
 </dl>
@@ -1742,35 +1654,79 @@ client.clients().create(
 <dl>
 <dd>
 
-**skipNonVerifiableCallbackUriConfirmationPrompt:** `Optional<Boolean>` 
-
-Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
-If set to true, a confirmation prompt will not be shown. We recommend that this is set to false for improved protection from malicious apps.
-See https://auth0.com/docs/secure/security-guidance/measures-against-app-impersonation for more information.
+**q:** `Optional<String>` — Advanced Query in <a href="https://lucene.apache.org/core/2_9_4/queryparsersyntax.html">Lucene</a> syntax.<br /><b>Permitted Queries</b>:<br /><ul><li><i>client_grant.organization_id:{organization_id}</i></li><li><i>client_grant.allow_any_organization:true</i></li></ul><b>Additional Restrictions</b>:<br /><ul><li>Cannot be used in combination with other filters</li><li>Requires use of the <i>from</i> and <i>take</i> paging parameters (checkpoint paginatinon)</li><li>Reduced rate limits apply. See <a href="https://auth0.com/docs/troubleshoot/customer-support/operational-policies/rate-limit-policy/rate-limit-configurations/enterprise-public">Rate Limit Configurations</a></li></ul><i><b>Note</b>: Recent updates may not be immediately reflected in query results</i>
     
 </dd>
 </dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
 
+<details><summary><code>client.clients.create(request) -> CreateClientResponseContent</code></summary>
 <dl>
 <dd>
 
-**tokenExchange:** `Optional<ClientTokenExchangeConfiguration>` 
-    
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Create a new client (application or SSO integration). For more information, read [Create Applications](https://www.auth0.com/docs/get-started/auth0-overview/create-applications)
+[API Endpoints for Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on/api-endpoints-for-single-sign-on).
+
+Notes: 
+- We recommend leaving the `client_secret` parameter unspecified to allow the generation of a safe secret.
+- The `client_authentication_methods` and `token_endpoint_auth_method` properties are mutually exclusive. Use 
+`client_authentication_methods` to configure the client with Private Key JWT authentication method. Otherwise, use `token_endpoint_auth_method`
+to configure the client with client secret (basic or post) or with no authentication method (none).
+- When using `client_authentication_methods` to configure the client with Private Key JWT authentication method, specify fully defined credentials. 
+These credentials will be automatically enabled for Private Key JWT authentication on the client. 
+- To configure `client_authentication_methods`, the `create:client_credentials` scope is required.
+- To configure `client_authentication_methods`, the property `jwt_configuration.alg` must be set to RS256.
+
+SSO Integrations created via this endpoint will accept login requests and share user profile information.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**parRequestExpiry:** `Optional<Integer>` — Specifies how long, in seconds, a Pushed Authorization Request URI remains valid
-    
+<dl>
+<dd>
+
+```java
+client.clients().create(
+    CreateClientRequestContent
+        .builder()
+        .name("name")
+        .build()
+);
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**tokenQuota:** `Optional<CreateTokenQuota>` 
+<dl>
+<dd>
+
+**name:** `String` — Name of this client (min length: 1 character, does not allow `<` or `>`).
     
 </dd>
 </dl>
@@ -1778,7 +1734,7 @@ See https://auth0.com/docs/secure/security-guidance/measures-against-app-imperso
 <dl>
 <dd>
 
-**resourceServerIdentifier:** `Optional<String>` — The identifier of the resource server that this client is linked to.
+**description:** `Optional<String>` — Free text description of this client (max length: 140 characters).
     
 </dd>
 </dl>
@@ -1786,7 +1742,7 @@ See https://auth0.com/docs/secure/security-guidance/measures-against-app-imperso
 <dl>
 <dd>
 
-**identityAssertionAuthorizationGrant:** `Optional<CreateIdentityAssertionAuthorizationGrant>` 
+**logoUri:** `Optional<String>` — URL of the logo to display for this client. Recommended size is 150x150 pixels.
     
 </dd>
 </dl>
@@ -1794,7 +1750,7 @@ See https://auth0.com/docs/secure/security-guidance/measures-against-app-imperso
 <dl>
 <dd>
 
-**thirdPartySecurityMode:** `Optional<ClientThirdPartySecurityModeEnum>` 
+**callbacks:** `Optional<List<String>>` — Comma-separated list of URLs whitelisted for Auth0 to use as a callback to the client after authentication.
     
 </dd>
 </dl>
@@ -1802,7 +1758,7 @@ See https://auth0.com/docs/secure/security-guidance/measures-against-app-imperso
 <dl>
 <dd>
 
-**redirectionPolicy:** `Optional<ClientRedirectionPolicyEnum>` 
+**oidcLogout:** `Optional<ClientOidcBackchannelLogoutSettings>` 
     
 </dd>
 </dl>
@@ -1810,7 +1766,7 @@ See https://auth0.com/docs/secure/security-guidance/measures-against-app-imperso
 <dl>
 <dd>
 
-**expressConfiguration:** `Optional<ExpressConfiguration>` 
+**oidcBackchannelLogout:** `Optional<ClientOidcBackchannelLogoutSettings>` — Configuration for OIDC backchannel logout (deprecated, in favor of oidc_logout)
     
 </dd>
 </dl>
@@ -1818,7 +1774,7 @@ See https://auth0.com/docs/secure/security-guidance/measures-against-app-imperso
 <dl>
 <dd>
 
-**myOrganizationConfiguration:** `Optional<ClientMyOrganizationPostConfiguration>` 
+**sessionTransfer:** `Optional<ClientSessionTransferConfiguration>` 
     
 </dd>
 </dl>
@@ -1826,223 +1782,167 @@ See https://auth0.com/docs/secure/security-guidance/measures-against-app-imperso
 <dl>
 <dd>
 
-**asyncApprovalNotificationChannels:** `Optional<List<AsyncApprovalNotificationsChannelsEnum>>` 
+**allowedOrigins:** `Optional<List<String>>` — Comma-separated list of URLs allowed to make requests from JavaScript to Auth0 API (typically used with CORS). By default, all your callback URLs will be allowed. This field allows you to enter other origins if necessary. You can also use wildcards at the subdomain level (e.g., https://*.contoso.com). Query strings and hash information are not taken into account when validating these URLs.
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
+**webOrigins:** `Optional<List<String>>` — Comma-separated list of allowed origins for use with <a href='https://auth0.com/docs/cross-origin-authentication'>Cross-Origin Authentication</a>, <a href='https://auth0.com/docs/flows/concepts/device-auth'>Device Flow</a>, and <a href='https://auth0.com/docs/protocols/oauth2#how-response-mode-works'>web message response mode</a>.
+    
 </dd>
 </dl>
-</details>
 
-<details><summary><code>client.clients.previewCimdMetadata(request) -> PreviewCimdMetadataResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+**clientAliases:** `Optional<List<String>>` — List of audiences/realms for SAML protocol. Used by the wsfed addon.
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**allowedClients:** `Optional<List<String>>` — List of allow clients and API ids that are allowed to make delegation requests. Empty means all all your clients are allowed.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-
-      Fetches and validates a Client ID Metadata Document without creating a client.
-      Returns the raw metadata and how it would be mapped to Auth0 client fields.
-      This endpoint is useful for testing metadata URIs before creating CIMD clients.
+**allowedLogoutUrls:** `Optional<List<String>>` — Comma-separated list of URLs that are valid to redirect to after logout from Auth0. Wildcards are allowed for subdomains.
     
 </dd>
 </dl>
-</dd>
-</dl>
-
-#### 🔌 Usage
 
 <dl>
 <dd>
 
+**grantTypes:** `Optional<List<String>>` — List of grant types supported for this application. Can include `authorization_code`, `implicit`, `refresh_token`, `client_credentials`, `password`, `http://auth0.com/oauth/grant-type/password-realm`, `http://auth0.com/oauth/grant-type/mfa-oob`, `http://auth0.com/oauth/grant-type/mfa-otp`, `http://auth0.com/oauth/grant-type/mfa-recovery-code`, `urn:openid:params:grant-type:ciba`, `urn:ietf:params:oauth:grant-type:device_code`, and `urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token`.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-```java
-client.clients().previewCimdMetadata(
-    PreviewCimdMetadataRequestContent
-        .builder()
-        .externalClientId("external_client_id")
-        .build()
-);
-```
-</dd>
-</dl>
+**tokenEndpointAuthMethod:** `Optional<ClientTokenEndpointAuthMethodEnum>` 
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**isTokenEndpointIpHeaderTrusted:** `Optional<Boolean>` — If true, trust that the IP specified in the `auth0-forwarded-for` header is the end-user's IP for brute-force-protection on token endpoint.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**externalClientId:** `String` — URL to the Client ID Metadata Document
+**appType:** `Optional<ClientAppTypeEnum>` 
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
+**isFirstParty:** `Optional<Boolean>` — Whether this client a first party client or not
+    
 </dd>
 </dl>
-</details>
 
-<details><summary><code>client.clients.registerCimdClient(request) -> RegisterCimdClientResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+**oidcConformant:** `Optional<Boolean>` — Whether this client conforms to <a href='https://auth0.com/docs/api-auth/tutorials/adoption'>strict OIDC specifications</a> (true) or uses legacy features (false).
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**jwtConfiguration:** `Optional<ClientJwtConfiguration>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-Idempotent registration for Client ID Metadata Document (CIMD) clients.
-Uses external_client_id as the unique identifier for upsert operations.
+**encryptionKey:** `Optional<ClientEncryptionKey>` 
+    
+</dd>
+</dl>
 
-**Create:** Returns 201 when a new client is created (requires `create:clients` scope).
-**Update:** Returns 200 when an existing client is updated (requires `update:clients` scope).
+<dl>
+<dd>
 
-This endpoint automatically:
-- Fetches and validates the metadata document
-- Maps CIMD fields to Auth0 client configuration
-- Creates/rotates credentials from the JWKS
-- Enforces CIMD security policies (HTTPS-only, no shared secrets)
+**sso:** `Optional<Boolean>` — Applies only to SSO clients and determines whether Auth0 will handle Single Sign On (true) or whether the Identity Provider will (false).
+    
 </dd>
 </dl>
+
+<dl>
+<dd>
+
+**crossOriginAuthentication:** `Optional<Boolean>` — Whether this client can be used to make cross-origin authentication requests (true) or it is not allowed to make such requests (false).
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
+**crossOriginLoc:** `Optional<String>` — URL of the location in your site where the cross origin verification takes place for the cross-origin auth flow when performing Auth in your own domain instead of Auth0 hosted login page.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-```java
-client.clients().registerCimdClient(
-    RegisterCimdClientRequestContent
-        .builder()
-        .externalClientId("external_client_id")
-        .build()
-);
-```
-</dd>
-</dl>
+**ssoDisabled:** `Optional<Boolean>` — <code>true</code> to disable Single Sign On, <code>false</code> otherwise (default: <code>false</code>)
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-**externalClientId:** `String` — URL to the Client ID Metadata Document. Acts as the unique identifier for upsert operations.
+**customLoginPageOn:** `Optional<Boolean>` — <code>true</code> if the custom login page is to be used, <code>false</code> otherwise. Defaults to <code>true</code>
     
 </dd>
 </dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.clients.get(id) -> GetClientResponseContent</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
 
 <dl>
 <dd>
 
-Retrieve client details by ID. Clients are SSO connections or Applications linked with your Auth0 tenant. A list of fields to include or exclude may also be specified. 
-For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
-
-- The following properties can be retrieved with any of the scopes:
-    `client_id`, `app_type`, `name`, and `description`.
-- The following properties can only be retrieved with the `read:clients` or
-    `read:client_keys` scopes:
-    `callbacks`, `oidc_logout`, `allowed_origins`,
-    `web_origins`, `tenant`, `global`, `config_route`,
-    `callback_url_template`, `jwt_configuration`,
-    `jwt_configuration.lifetime_in_seconds`, `jwt_configuration.secret_encoded`,
-    `jwt_configuration.scopes`, `jwt_configuration.alg`, `api_type`,
-    `logo_uri`, `allowed_clients`, `owners`, `custom_login_page`,
-    `custom_login_page_off`, `sso`, `addons`, `form_template`,
-    `custom_login_page_codeview`, `resource_servers`, `client_metadata`,
-    `mobile`, `mobile.android`, `mobile.ios`, `allowed_logout_urls`,
-    `token_endpoint_auth_method`, `is_first_party`, `oidc_conformant`,
-    `is_token_endpoint_ip_header_trusted`, `initiate_login_uri`, `grant_types`,
-    `refresh_token`, `refresh_token.rotation_type`, `refresh_token.expiration_type`,
-    `refresh_token.leeway`, `refresh_token.token_lifetime`, `refresh_token.policies`, `organization_usage`,
-    `organization_require_behavior`.
-- The following properties can only be retrieved with the `read:client_keys` or `read:client_credentials` scopes:
-    `encryption_key`, `encryption_key.pub`, `encryption_key.cert`,
-    `client_secret`, `client_authentication_methods` and `signing_key`.
-</dd>
-</dl>
+**customLoginPage:** `Optional<String>` — The content (HTML, CSS, JS) of the custom login page.
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
-<dl>
-<dd>
-
-```java
-client.clients().get(
-    "id",
-    GetClientRequestParameters
-        .builder()
-        .fields("fields")
-        .includeFields(true)
-        .build()
-);
-```
-</dd>
-</dl>
+**customLoginPagePreview:** `Optional<String>` — The content (HTML, CSS, JS) of the custom login page. (Used on Previews)
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-**id:** `String` — ID of the client to retrieve.
+**formTemplate:** `Optional<String>` — HTML form template to be used for WS-Federation.
     
 </dd>
 </dl>
@@ -2050,7 +1950,7 @@ client.clients().get(
 <dl>
 <dd>
 
-**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
+**addons:** `Optional<ClientAddons>` 
     
 </dd>
 </dl>
@@ -2058,128 +1958,55 @@ client.clients().get(
 <dl>
 <dd>
 
-**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
+**clientMetadata:** `Optional<Map<String, Object>>` 
     
 </dd>
 </dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.clients.delete(id)</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
 
 <dl>
 <dd>
 
-Delete a client and related configuration (rules, connections, etc).
-</dd>
-</dl>
+**mobile:** `Optional<ClientMobile>` 
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-```java
-client.clients().delete("id");
-```
-</dd>
-</dl>
+**initiateLoginUri:** `Optional<String>` — Initiate login uri, must be https
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-**id:** `String` — ID of the client to delete.
+**nativeSocialLogin:** `Optional<NativeSocialLogin>` 
     
 </dd>
 </dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.clients.update(id, request) -> UpdateClientResponseContent</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
 
 <dl>
 <dd>
 
-Updates a client's settings. For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
-
-Notes:
-- The `client_secret` and `signing_key` attributes can only be updated with the `update:client_keys` scope.
-- The `client_authentication_methods` and `token_endpoint_auth_method` properties are mutually exclusive. Use `client_authentication_methods` to configure the client with Private Key JWT authentication method. Otherwise, use `token_endpoint_auth_method` to configure the client with client secret (basic or post) or with no authentication method (none).
-- When using `client_authentication_methods` to configure the client with Private Key JWT authentication method, only specify the credential IDs that were generated when creating the credentials on the client.
-- To configure `client_authentication_methods`, the `update:client_credentials` scope is required.
-- To configure `client_authentication_methods`, the property `jwt_configuration.alg` must be set to RS256.
-- To change a client's `is_first_party` property to `false`, the `organization_usage` and `organization_require_behavior` properties must be unset.
-</dd>
-</dl>
+**fedcmLogin:** `Optional<FedCmLogin>` 
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-```java
-client.clients().update(
-    "id",
-    UpdateClientRequestContent
-        .builder()
-        .build()
-);
-```
-</dd>
-</dl>
+**refreshToken:** `Optional<ClientRefreshTokenConfiguration>` 
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
-<dl>
-<dd>
-
-**id:** `String` — ID of the client to update.
+**defaultOrganization:** `Optional<ClientDefaultOrganization>` 
     
 </dd>
 </dl>
@@ -2187,7 +2014,7 @@ client.clients().update(
 <dl>
 <dd>
 
-**name:** `Optional<String>` — The name of the client. Must contain at least one character. Does not allow '<' or '>'.
+**organizationUsage:** `Optional<ClientOrganizationUsageEnum>` 
     
 </dd>
 </dl>
@@ -2195,7 +2022,7 @@ client.clients().update(
 <dl>
 <dd>
 
-**description:** `Optional<String>` — Free text description of the purpose of the Client. (Max character length: <code>140</code>)
+**organizationRequireBehavior:** `Optional<ClientOrganizationRequireBehaviorEnum>` 
     
 </dd>
 </dl>
@@ -2203,7 +2030,7 @@ client.clients().update(
 <dl>
 <dd>
 
-**clientSecret:** `Optional<String>` — The secret used to sign tokens for the client
+**organizationDiscoveryMethods:** `Optional<List<ClientOrganizationDiscoveryEnum>>` — Defines the available methods for organization discovery during the `pre_login_prompt`. Users can discover their organization either by `email`, `organization_name` or both.
     
 </dd>
 </dl>
@@ -2211,7 +2038,7 @@ client.clients().update(
 <dl>
 <dd>
 
-**logoUri:** `Optional<String>` — The URL of the client logo (recommended size: 150x150)
+**clientAuthenticationMethods:** `Optional<ClientCreateAuthenticationMethod>` 
     
 </dd>
 </dl>
@@ -2219,7 +2046,7 @@ client.clients().update(
 <dl>
 <dd>
 
-**callbacks:** `Optional<List<String>>` — A set of URLs that are valid to call back from Auth0 when authenticating users
+**requirePushedAuthorizationRequests:** `Optional<Boolean>` — Makes the use of Pushed Authorization Requests mandatory for this client
     
 </dd>
 </dl>
@@ -2227,7 +2054,7 @@ client.clients().update(
 <dl>
 <dd>
 
-**oidcLogout:** `Optional<ClientOidcBackchannelLogoutSettings>` 
+**requireProofOfPossession:** `Optional<Boolean>` — Makes the use of Proof-of-Possession mandatory for this client
     
 </dd>
 </dl>
@@ -2235,7 +2062,7 @@ client.clients().update(
 <dl>
 <dd>
 
-**oidcBackchannelLogout:** `Optional<ClientOidcBackchannelLogoutSettings>` — Configuration for OIDC backchannel logout (deprecated, in favor of oidc_logout)
+**signedRequestObject:** `Optional<ClientSignedRequestObjectWithPublicKey>` 
     
 </dd>
 </dl>
@@ -2243,7 +2070,7 @@ client.clients().update(
 <dl>
 <dd>
 
-**sessionTransfer:** `Optional<ClientSessionTransferConfiguration>` 
+**tokenVaultPrivilegedAccess:** `Optional<ClientTokenVaultPrivilegedAccessWithPublicKey>` 
     
 </dd>
 </dl>
@@ -2251,7 +2078,7 @@ client.clients().update(
 <dl>
 <dd>
 
-**allowedOrigins:** `Optional<List<String>>` — A set of URLs that represents valid origins for CORS
+**complianceLevel:** `Optional<ClientComplianceLevelEnum>` 
     
 </dd>
 </dl>
@@ -2259,7 +2086,11 @@ client.clients().update(
 <dl>
 <dd>
 
-**webOrigins:** `Optional<List<String>>` — A set of URLs that represents valid web origins for use with web message response mode
+**skipNonVerifiableCallbackUriConfirmationPrompt:** `Optional<Boolean>` 
+
+Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
+If set to true, a confirmation prompt will not be shown. We recommend that this is set to false for improved protection from malicious apps.
+See https://auth0.com/docs/secure/security-guidance/measures-against-app-impersonation for more information.
     
 </dd>
 </dl>
@@ -2267,7 +2098,7 @@ client.clients().update(
 <dl>
 <dd>
 
-**grantTypes:** `Optional<List<String>>` — A set of grant types that the client is authorized to use. Can include `authorization_code`, `implicit`, `refresh_token`, `client_credentials`, `password`, `http://auth0.com/oauth/grant-type/password-realm`, `http://auth0.com/oauth/grant-type/mfa-oob`, `http://auth0.com/oauth/grant-type/mfa-otp`, `http://auth0.com/oauth/grant-type/mfa-recovery-code`, `urn:openid:params:grant-type:ciba`, `urn:ietf:params:oauth:grant-type:device_code`, and `urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token`.
+**tokenExchange:** `Optional<ClientTokenExchangeConfiguration>` 
     
 </dd>
 </dl>
@@ -2275,7 +2106,7 @@ client.clients().update(
 <dl>
 <dd>
 
-**clientAliases:** `Optional<List<String>>` — List of audiences for SAML protocol
+**parRequestExpiry:** `Optional<Integer>` — Specifies how long, in seconds, a Pushed Authorization Request URI remains valid
     
 </dd>
 </dl>
@@ -2283,7 +2114,7 @@ client.clients().update(
 <dl>
 <dd>
 
-**allowedClients:** `Optional<List<String>>` — Ids of clients that will be allowed to perform delegation requests. Clients that will be allowed to make delegation request. By default, all your clients will be allowed. This field allows you to specify specific clients
+**tokenQuota:** `Optional<CreateTokenQuota>` 
     
 </dd>
 </dl>
@@ -2291,7 +2122,7 @@ client.clients().update(
 <dl>
 <dd>
 
-**allowedLogoutUrls:** `Optional<List<String>>` — URLs that are valid to redirect to after logout from Auth0
+**resourceServerIdentifier:** `Optional<String>` — The identifier of the resource server that this client is linked to.
     
 </dd>
 </dl>
@@ -2299,7 +2130,7 @@ client.clients().update(
 <dl>
 <dd>
 
-**jwtConfiguration:** `Optional<ClientJwtConfiguration>` — An object that holds settings related to how JWTs are created
+**identityAssertionAuthorizationGrant:** `Optional<CreateIdentityAssertionAuthorizationGrant>` 
     
 </dd>
 </dl>
@@ -2307,7 +2138,7 @@ client.clients().update(
 <dl>
 <dd>
 
-**encryptionKey:** `Optional<ClientEncryptionKey>` — The client's encryption key
+**thirdPartySecurityMode:** `Optional<ClientThirdPartySecurityModeEnum>` 
     
 </dd>
 </dl>
@@ -2315,7 +2146,7 @@ client.clients().update(
 <dl>
 <dd>
 
-**sso:** `Optional<Boolean>` — <code>true</code> to use Auth0 instead of the IdP to do Single Sign On, <code>false</code> otherwise (default: <code>false</code>)
+**redirectionPolicy:** `Optional<ClientRedirectionPolicyEnum>` 
     
 </dd>
 </dl>
@@ -2323,7 +2154,7 @@ client.clients().update(
 <dl>
 <dd>
 
-**crossOriginAuthentication:** `Optional<Boolean>` — <code>true</code> if this client can be used to make cross-origin authentication requests, <code>false</code> otherwise if cross origin is disabled
+**expressConfiguration:** `Optional<ExpressConfiguration>` 
     
 </dd>
 </dl>
@@ -2331,7 +2162,7 @@ client.clients().update(
 <dl>
 <dd>
 
-**crossOriginLoc:** `Optional<String>` — URL for the location in your site where the cross origin verification takes place for the cross-origin auth flow when performing Auth in your own domain instead of Auth0 hosted login page.
+**myOrganizationConfiguration:** `Optional<ClientMyOrganizationPostConfiguration>` 
     
 </dd>
 </dl>
@@ -2339,283 +2170,223 @@ client.clients().update(
 <dl>
 <dd>
 
-**ssoDisabled:** `Optional<Boolean>` — <code>true</code> to disable Single Sign On, <code>false</code> otherwise (default: <code>false</code>)
+**asyncApprovalNotificationChannels:** `Optional<List<AsyncApprovalNotificationsChannelsEnum>>` 
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**customLoginPageOn:** `Optional<Boolean>` — <code>true</code> if the custom login page is to be used, <code>false</code> otherwise.
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.clients.previewCimdMetadata(request) -> PreviewCimdMetadataResponseContent</code></summary>
 <dl>
 <dd>
 
-**tokenEndpointAuthMethod:** `Optional<ClientTokenEndpointAuthMethodOrNullEnum>` 
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**isTokenEndpointIpHeaderTrusted:** `Optional<Boolean>` — If true, trust that the IP specified in the `auth0-forwarded-for` header is the end-user's IP for brute-force-protection on token endpoint.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**appType:** `Optional<ClientAppTypeEnum>` 
+
+      Fetches and validates a Client ID Metadata Document without creating a client.
+      Returns the raw metadata and how it would be mapped to Auth0 client fields.
+      This endpoint is useful for testing metadata URIs before creating CIMD clients.
     
 </dd>
 </dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
 
 <dl>
 <dd>
 
-**isFirstParty:** `Optional<Boolean>` — Whether this client a first party client or not
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**oidcConformant:** `Optional<Boolean>` — Whether this client will conform to strict OIDC specifications
-    
+```java
+client.clients().previewCimdMetadata(
+    PreviewCimdMetadataRequestContent
+        .builder()
+        .externalClientId("external_client_id")
+        .build()
+);
+```
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**customLoginPage:** `Optional<String>` — The content (HTML, CSS, JS) of the custom login page
-    
 </dd>
 </dl>
 
-<dl>
-<dd>
-
-**customLoginPagePreview:** `Optional<String>` 
-    
-</dd>
-</dl>
+#### ⚙️ Parameters
 
 <dl>
 <dd>
 
-**tokenQuota:** `Optional<UpdateTokenQuota>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**identityAssertionAuthorizationGrant:** `Optional<UpdateIdentityAssertionAuthorizationGrant>` 
+**externalClientId:** `String` — URL to the Client ID Metadata Document
     
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**formTemplate:** `Optional<String>` — Form template for WS-Federation protocol
-    
 </dd>
 </dl>
 
-<dl>
-<dd>
 
-**addons:** `Optional<ClientAddons>` 
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.clients.registerCimdClient(request) -> RegisterCimdClientResponseContent</code></summary>
 <dl>
 <dd>
 
-**clientMetadata:** `Optional<Map<String, Object>>` 
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**mobile:** `Optional<ClientMobile>` — Configuration related to native mobile apps
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**initiateLoginUri:** `Optional<String>` — Initiate login uri, must be https
-    
-</dd>
-</dl>
+Idempotent registration for Client ID Metadata Document (CIMD) clients.
+Uses external_client_id as the unique identifier for upsert operations.
 
-<dl>
-<dd>
+**Create:** Returns 201 when a new client is created (requires `create:clients` scope).
+**Update:** Returns 200 when an existing client is updated (requires `update:clients` scope).
 
-**nativeSocialLogin:** `Optional<NativeSocialLoginPatch>` 
-    
+This endpoint automatically:
+- Fetches and validates the metadata document
+- Maps CIMD fields to Auth0 client configuration
+- Creates/rotates credentials from the JWKS
+- Enforces CIMD security policies (HTTPS-only, no shared secrets)
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**fedcmLogin:** `Optional<FedCmLoginPatch>` 
-    
 </dd>
 </dl>
 
-<dl>
-<dd>
-
-**refreshToken:** `Optional<ClientRefreshTokenConfiguration>` 
-    
-</dd>
-</dl>
+#### 🔌 Usage
 
 <dl>
 <dd>
 
-**defaultOrganization:** `Optional<ClientDefaultOrganization>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**organizationUsage:** `Optional<ClientOrganizationUsagePatchEnum>` 
-    
+```java
+client.clients().registerCimdClient(
+    RegisterCimdClientRequestContent
+        .builder()
+        .externalClientId("external_client_id")
+        .build()
+);
+```
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**organizationRequireBehavior:** `Optional<ClientOrganizationRequireBehaviorPatchEnum>` 
-    
 </dd>
 </dl>
 
-<dl>
-<dd>
-
-**organizationDiscoveryMethods:** `Optional<List<ClientOrganizationDiscoveryEnum>>` — Defines the available methods for organization discovery during the `pre_login_prompt`. Users can discover their organization either by `email`, `organization_name` or both.
-    
-</dd>
-</dl>
+#### ⚙️ Parameters
 
 <dl>
 <dd>
 
-**clientAuthenticationMethods:** `Optional<ClientAuthenticationMethod>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**requirePushedAuthorizationRequests:** `Optional<Boolean>` — Makes the use of Pushed Authorization Requests mandatory for this client
+**externalClientId:** `String` — URL to the Client ID Metadata Document. Acts as the unique identifier for upsert operations.
     
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**requireProofOfPossession:** `Optional<Boolean>` — Makes the use of Proof-of-Possession mandatory for this client
-    
 </dd>
 </dl>
 
-<dl>
-<dd>
 
-**signedRequestObject:** `Optional<ClientSignedRequestObjectWithCredentialId>` 
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.clients.get(id) -> GetClientResponseContent</code></summary>
 <dl>
 <dd>
 
-**tokenVaultPrivilegedAccess:** `Optional<ClientTokenVaultPrivilegedAccessWithCredentialId>` 
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**complianceLevel:** `Optional<ClientComplianceLevelEnum>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**skipNonVerifiableCallbackUriConfirmationPrompt:** `Optional<Boolean>` 
+Retrieve client details by ID. Clients are SSO connections or Applications linked with your Auth0 tenant. A list of fields to include or exclude may also be specified. 
+For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
 
-Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
-If set to true, a confirmation prompt will not be shown. We recommend that this is set to false for improved protection from malicious apps.
-See https://auth0.com/docs/secure/security-guidance/measures-against-app-impersonation for more information.
-    
+- The following properties can be retrieved with any of the scopes:
+    `client_id`, `app_type`, `name`, and `description`.
+- The following properties can only be retrieved with the `read:clients` or
+    `read:client_keys` scopes:
+    `callbacks`, `oidc_logout`, `allowed_origins`,
+    `web_origins`, `tenant`, `global`, `config_route`,
+    `callback_url_template`, `jwt_configuration`,
+    `jwt_configuration.lifetime_in_seconds`, `jwt_configuration.secret_encoded`,
+    `jwt_configuration.scopes`, `jwt_configuration.alg`, `api_type`,
+    `logo_uri`, `allowed_clients`, `owners`, `custom_login_page`,
+    `custom_login_page_off`, `sso`, `addons`, `form_template`,
+    `custom_login_page_codeview`, `resource_servers`, `client_metadata`,
+    `mobile`, `mobile.android`, `mobile.ios`, `allowed_logout_urls`,
+    `token_endpoint_auth_method`, `is_first_party`, `oidc_conformant`,
+    `is_token_endpoint_ip_header_trusted`, `initiate_login_uri`, `grant_types`,
+    `refresh_token`, `refresh_token.rotation_type`, `refresh_token.expiration_type`,
+    `refresh_token.leeway`, `refresh_token.token_lifetime`, `refresh_token.policies`, `organization_usage`,
+    `organization_require_behavior`.
+- The following properties can only be retrieved with the `read:client_keys` or `read:client_credentials` scopes:
+    `encryption_key`, `encryption_key.pub`, `encryption_key.cert`,
+    `client_secret`, `client_authentication_methods` and `signing_key`.
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**tokenExchange:** `Optional<ClientTokenExchangeConfigurationOrNull>` 
-    
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**parRequestExpiry:** `Optional<Integer>` — Specifies how long, in seconds, a Pushed Authorization Request URI remains valid
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**expressConfiguration:** `Optional<ExpressConfigurationOrNull>` 
-    
+```java
+client.clients().get(
+    "id",
+    GetClientRequestParameters
+        .builder()
+        .fields("fields")
+        .includeFields(true)
+        .build()
+);
+```
 </dd>
 </dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
 
 <dl>
 <dd>
 
-**myOrganizationConfiguration:** `Optional<ClientMyOrganizationPatchConfiguration>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**asyncApprovalNotificationChannels:** `Optional<List<AsyncApprovalNotificationsChannelsEnum>>` 
+**id:** `String` — ID of the client to retrieve.
     
 </dd>
 </dl>
@@ -2623,7 +2394,7 @@ See https://auth0.com/docs/secure/security-guidance/measures-against-app-imperso
 <dl>
 <dd>
 
-**thirdPartySecurityMode:** `Optional<ClientThirdPartySecurityModeEnum>` 
+**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
     
 </dd>
 </dl>
@@ -2631,7 +2402,7 @@ See https://auth0.com/docs/secure/security-guidance/measures-against-app-imperso
 <dl>
 <dd>
 
-**redirectionPolicy:** `Optional<ClientRedirectionPolicyEnum>` 
+**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
     
 </dd>
 </dl>
@@ -2643,7 +2414,7 @@ See https://auth0.com/docs/secure/security-guidance/measures-against-app-imperso
 </dl>
 </details>
 
-<details><summary><code>client.clients.rotateSecret(id) -> RotateClientSecretResponseContent</code></summary>
+<details><summary><code>client.clients.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -2655,11 +2426,7 @@ See https://auth0.com/docs/secure/security-guidance/measures-against-app-imperso
 <dl>
 <dd>
 
-Rotate a client secret.
-
-This endpoint cannot be used with clients configured with Private Key JWT authentication method (client_authentication_methods configured with private_key_jwt). The generated secret is NOT base64 encoded.
-
-For more information, read [Rotate Client Secrets](https://www.auth0.com/docs/get-started/applications/rotate-client-secret).
+Delete a client and related configuration (rules, connections, etc).
 </dd>
 </dl>
 </dd>
@@ -2674,7 +2441,7 @@ For more information, read [Rotate Client Secrets](https://www.auth0.com/docs/ge
 <dd>
 
 ```java
-client.clients().rotateSecret("id");
+client.clients().delete("id");
 ```
 </dd>
 </dl>
@@ -2689,7 +2456,7 @@ client.clients().rotateSecret("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the client that will rotate secrets.
+**id:** `String` — ID of the client to delete.
     
 </dd>
 </dl>
@@ -2701,8 +2468,7 @@ client.clients().rotateSecret("id");
 </dl>
 </details>
 
-## ConnectionProfiles
-<details><summary><code>client.connectionProfiles.list() -> SyncPagingIterable&amp;lt;ConnectionProfile&amp;gt;</code></summary>
+<details><summary><code>client.clients.update(id, request) -> UpdateClientResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -2714,7 +2480,15 @@ client.clients().rotateSecret("id");
 <dl>
 <dd>
 
-Retrieve a list of Connection Profiles. This endpoint supports Checkpoint pagination.
+Updates a client's settings. For more information, read [Applications in Auth0](https://www.auth0.com/docs/get-started/applications) and [Single Sign-On](https://www.auth0.com/docs/authenticate/single-sign-on).
+
+Notes:
+- The `client_secret` and `signing_key` attributes can only be updated with the `update:client_keys` scope.
+- The `client_authentication_methods` and `token_endpoint_auth_method` properties are mutually exclusive. Use `client_authentication_methods` to configure the client with Private Key JWT authentication method. Otherwise, use `token_endpoint_auth_method` to configure the client with client secret (basic or post) or with no authentication method (none).
+- When using `client_authentication_methods` to configure the client with Private Key JWT authentication method, only specify the credential IDs that were generated when creating the credentials on the client.
+- To configure `client_authentication_methods`, the `update:client_credentials` scope is required.
+- To configure `client_authentication_methods`, the property `jwt_configuration.alg` must be set to RS256.
+- To change a client's `is_first_party` property to `false`, the `organization_usage` and `organization_require_behavior` properties must be unset.
 </dd>
 </dl>
 </dd>
@@ -2729,11 +2503,10 @@ Retrieve a list of Connection Profiles. This endpoint supports Checkpoint pagina
 <dd>
 
 ```java
-client.connectionProfiles().list(
-    ListConnectionProfileRequestParameters
+client.clients().update(
+    "id",
+    UpdateClientRequestContent
         .builder()
-        .from("from")
-        .take(1)
         .build()
 );
 ```
@@ -2750,7 +2523,7 @@ client.connectionProfiles().list(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Optional Id from which to start selection.
+**id:** `String` — ID of the client to update.
     
 </dd>
 </dl>
@@ -2758,66 +2531,71 @@ client.connectionProfiles().list(
 <dl>
 <dd>
 
-**take:** `Optional<Integer>` — Number of results per page. Defaults to 5.
+**name:** `Optional<String>` — The name of the client. Must contain at least one character. Does not allow '<' or '>'.
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
-</dd>
+**description:** `Optional<String>` — Free text description of the purpose of the Client. (Max character length: <code>140</code>)
+    
+</dd>
 </dl>
-</details>
 
-<details><summary><code>client.connectionProfiles.create(request) -> CreateConnectionProfileResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+**clientSecret:** `Optional<String>` — The secret used to sign tokens for the client
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**logoUri:** `Optional<String>` — The URL of the client logo (recommended size: 150x150)
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-Create a Connection Profile.
-</dd>
-</dl>
+**callbacks:** `Optional<List<String>>` — A set of URLs that are valid to call back from Auth0 when authenticating users
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
+**oidcLogout:** `Optional<ClientOidcBackchannelLogoutSettings>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-```java
-client.connectionProfiles().create(
-    CreateConnectionProfileRequestContent
-        .builder()
-        .name("name")
-        .build()
-);
-```
-</dd>
-</dl>
+**oidcBackchannelLogout:** `Optional<ClientOidcBackchannelLogoutSettings>` — Configuration for OIDC backchannel logout (deprecated, in favor of oidc_logout)
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**sessionTransfer:** `Optional<ClientSessionTransferConfiguration>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**name:** `String` 
+**allowedOrigins:** `Optional<List<String>>` — A set of URLs that represents valid origins for CORS
     
 </dd>
 </dl>
@@ -2825,7 +2603,7 @@ client.connectionProfiles().create(
 <dl>
 <dd>
 
-**organization:** `Optional<ConnectionProfileOrganization>` 
+**webOrigins:** `Optional<List<String>>` — A set of URLs that represents valid web origins for use with web message response mode
     
 </dd>
 </dl>
@@ -2833,7 +2611,7 @@ client.connectionProfiles().create(
 <dl>
 <dd>
 
-**connectionNamePrefixTemplate:** `Optional<String>` 
+**grantTypes:** `Optional<List<String>>` — A set of grant types that the client is authorized to use. Can include `authorization_code`, `implicit`, `refresh_token`, `client_credentials`, `password`, `http://auth0.com/oauth/grant-type/password-realm`, `http://auth0.com/oauth/grant-type/mfa-oob`, `http://auth0.com/oauth/grant-type/mfa-otp`, `http://auth0.com/oauth/grant-type/mfa-recovery-code`, `urn:openid:params:grant-type:ciba`, `urn:ietf:params:oauth:grant-type:device_code`, and `urn:auth0:params:oauth:grant-type:token-exchange:federated-connection-access-token`.
     
 </dd>
 </dl>
@@ -2841,7 +2619,7 @@ client.connectionProfiles().create(
 <dl>
 <dd>
 
-**enabledFeatures:** `Optional<List<EnabledFeaturesEnum>>` 
+**clientAliases:** `Optional<List<String>>` — List of audiences for SAML protocol
     
 </dd>
 </dl>
@@ -2849,7 +2627,7 @@ client.connectionProfiles().create(
 <dl>
 <dd>
 
-**connectionConfig:** `Optional<ConnectionProfileConfig>` 
+**allowedClients:** `Optional<List<String>>` — Ids of clients that will be allowed to perform delegation requests. Clients that will be allowed to make delegation request. By default, all your clients will be allowed. This field allows you to specify specific clients
     
 </dd>
 </dl>
@@ -2857,267 +2635,299 @@ client.connectionProfiles().create(
 <dl>
 <dd>
 
-**strategyOverrides:** `Optional<ConnectionProfileStrategyOverrides>` 
+**allowedLogoutUrls:** `Optional<List<String>>` — URLs that are valid to redirect to after logout from Auth0
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
+**jwtConfiguration:** `Optional<ClientJwtConfiguration>` — An object that holds settings related to how JWTs are created
+    
 </dd>
 </dl>
-</details>
 
-<details><summary><code>client.connectionProfiles.listTemplates() -> ListConnectionProfileTemplateResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+**encryptionKey:** `Optional<ClientEncryptionKey>` — The client's encryption key
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**sso:** `Optional<Boolean>` — <code>true</code> to use Auth0 instead of the IdP to do Single Sign On, <code>false</code> otherwise (default: <code>false</code>)
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-Retrieve a list of Connection Profile Templates.
-</dd>
-</dl>
+**crossOriginAuthentication:** `Optional<Boolean>` — <code>true</code> if this client can be used to make cross-origin authentication requests, <code>false</code> otherwise if cross origin is disabled
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
+**crossOriginLoc:** `Optional<String>` — URL for the location in your site where the cross origin verification takes place for the cross-origin auth flow when performing Auth in your own domain instead of Auth0 hosted login page.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-```java
-client.connectionProfiles().listTemplates();
-```
-</dd>
-</dl>
+**ssoDisabled:** `Optional<Boolean>` — <code>true</code> to disable Single Sign On, <code>false</code> otherwise (default: <code>false</code>)
+    
 </dd>
 </dl>
 
+<dl>
+<dd>
 
+**customLoginPageOn:** `Optional<Boolean>` — <code>true</code> if the custom login page is to be used, <code>false</code> otherwise.
+    
 </dd>
 </dl>
-</details>
 
-<details><summary><code>client.connectionProfiles.getTemplate(id) -> GetConnectionProfileTemplateResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+**tokenEndpointAuthMethod:** `Optional<ClientTokenEndpointAuthMethodOrNullEnum>` 
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**isTokenEndpointIpHeaderTrusted:** `Optional<Boolean>` — If true, trust that the IP specified in the `auth0-forwarded-for` header is the end-user's IP for brute-force-protection on token endpoint.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-Retrieve a Connection Profile Template.
-</dd>
-</dl>
+**appType:** `Optional<ClientAppTypeEnum>` 
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
+**isFirstParty:** `Optional<Boolean>` — Whether this client a first party client or not
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-```java
-client.connectionProfiles().getTemplate("id");
-```
-</dd>
-</dl>
+**oidcConformant:** `Optional<Boolean>` — Whether this client will conform to strict OIDC specifications
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**customLoginPage:** `Optional<String>` — The content (HTML, CSS, JS) of the custom login page
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**id:** `String` — ID of the connection-profile-template to retrieve.
+**customLoginPagePreview:** `Optional<String>` 
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
+**tokenQuota:** `Optional<UpdateTokenQuota>` 
+    
 </dd>
 </dl>
-</details>
 
-<details><summary><code>client.connectionProfiles.get(id) -> GetConnectionProfileResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+**identityAssertionAuthorizationGrant:** `Optional<UpdateIdentityAssertionAuthorizationGrant>` 
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**formTemplate:** `Optional<String>` — Form template for WS-Federation protocol
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-Retrieve details about a single Connection Profile specified by ID.
-</dd>
-</dl>
+**addons:** `Optional<ClientAddons>` 
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
+**clientMetadata:** `Optional<Map<String, Object>>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-```java
-client.connectionProfiles().get("id");
-```
-</dd>
-</dl>
+**mobile:** `Optional<ClientMobile>` — Configuration related to native mobile apps
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**initiateLoginUri:** `Optional<String>` — Initiate login uri, must be https
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**id:** `String` — ID of the connection-profile to retrieve.
+**nativeSocialLogin:** `Optional<NativeSocialLoginPatch>` 
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
+**fedcmLogin:** `Optional<FedCmLoginPatch>` 
+    
 </dd>
 </dl>
-</details>
 
-<details><summary><code>client.connectionProfiles.delete(id)</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+**refreshToken:** `Optional<ClientRefreshTokenConfiguration>` 
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**defaultOrganization:** `Optional<ClientDefaultOrganization>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-Delete a single Connection Profile specified by ID.
-</dd>
-</dl>
+**organizationUsage:** `Optional<ClientOrganizationUsagePatchEnum>` 
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
+**organizationRequireBehavior:** `Optional<ClientOrganizationRequireBehaviorPatchEnum>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-```java
-client.connectionProfiles().delete("id");
-```
-</dd>
-</dl>
+**organizationDiscoveryMethods:** `Optional<List<ClientOrganizationDiscoveryEnum>>` — Defines the available methods for organization discovery during the `pre_login_prompt`. Users can discover their organization either by `email`, `organization_name` or both.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**clientAuthenticationMethods:** `Optional<ClientAuthenticationMethod>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**id:** `String` — ID of the connection-profile to delete.
+**requirePushedAuthorizationRequests:** `Optional<Boolean>` — Makes the use of Pushed Authorization Requests mandatory for this client
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
+**requireProofOfPossession:** `Optional<Boolean>` — Makes the use of Proof-of-Possession mandatory for this client
+    
 </dd>
 </dl>
-</details>
 
-<details><summary><code>client.connectionProfiles.update(id, request) -> UpdateConnectionProfileResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+**signedRequestObject:** `Optional<ClientSignedRequestObjectWithCredentialId>` 
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**tokenVaultPrivilegedAccess:** `Optional<ClientTokenVaultPrivilegedAccessWithCredentialId>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-Update the details of a specific Connection Profile.
-</dd>
-</dl>
+**complianceLevel:** `Optional<ClientComplianceLevelEnum>` 
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
-<dl>
-<dd>
+**skipNonVerifiableCallbackUriConfirmationPrompt:** `Optional<Boolean>` 
 
-```java
-client.connectionProfiles().update(
-    "id",
-    UpdateConnectionProfileRequestContent
-        .builder()
-        .build()
-);
-```
-</dd>
-</dl>
+Controls whether a confirmation prompt is shown during login flows when the redirect URI uses non-verifiable callback URIs (for example, a custom URI schema such as `myapp://`, or `localhost`).
+If set to true, a confirmation prompt will not be shown. We recommend that this is set to false for improved protection from malicious apps.
+See https://auth0.com/docs/secure/security-guidance/measures-against-app-impersonation for more information.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-**id:** `String` — ID of the connection profile to update.
+**tokenExchange:** `Optional<ClientTokenExchangeConfigurationOrNull>` 
     
 </dd>
 </dl>
@@ -3125,7 +2935,7 @@ client.connectionProfiles().update(
 <dl>
 <dd>
 
-**name:** `Optional<String>` 
+**parRequestExpiry:** `Optional<Integer>` — Specifies how long, in seconds, a Pushed Authorization Request URI remains valid
     
 </dd>
 </dl>
@@ -3133,7 +2943,7 @@ client.connectionProfiles().update(
 <dl>
 <dd>
 
-**organization:** `Optional<ConnectionProfileOrganization>` 
+**expressConfiguration:** `Optional<ExpressConfigurationOrNull>` 
     
 </dd>
 </dl>
@@ -3141,7 +2951,7 @@ client.connectionProfiles().update(
 <dl>
 <dd>
 
-**connectionNamePrefixTemplate:** `Optional<String>` 
+**myOrganizationConfiguration:** `Optional<ClientMyOrganizationPatchConfiguration>` 
     
 </dd>
 </dl>
@@ -3149,7 +2959,7 @@ client.connectionProfiles().update(
 <dl>
 <dd>
 
-**enabledFeatures:** `Optional<List<EnabledFeaturesEnum>>` 
+**asyncApprovalNotificationChannels:** `Optional<List<AsyncApprovalNotificationsChannelsEnum>>` 
     
 </dd>
 </dl>
@@ -3157,7 +2967,7 @@ client.connectionProfiles().update(
 <dl>
 <dd>
 
-**connectionConfig:** `Optional<ConnectionProfileConfig>` 
+**thirdPartySecurityMode:** `Optional<ClientThirdPartySecurityModeEnum>` 
     
 </dd>
 </dl>
@@ -3165,7 +2975,7 @@ client.connectionProfiles().update(
 <dl>
 <dd>
 
-**strategyOverrides:** `Optional<ConnectionProfileStrategyOverrides>` 
+**redirectionPolicy:** `Optional<ClientRedirectionPolicyEnum>` 
     
 </dd>
 </dl>
@@ -3177,8 +2987,7 @@ client.connectionProfiles().update(
 </dl>
 </details>
 
-## Connections
-<details><summary><code>client.connections.list() -> SyncPagingIterable&amp;lt;ConnectionForList&amp;gt;</code></summary>
+<details><summary><code>client.clients.rotateSecret(id) -> RotateClientSecretResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -3190,23 +2999,11 @@ client.connectionProfiles().update(
 <dl>
 <dd>
 
-Retrieves detailed list of all [connections](https://auth0.com/docs/authenticate/identity-providers) that match the specified strategy. If no strategy is provided, all connections within your tenant are retrieved. This action can accept a list of fields to include or exclude from the resulting list of connections. 
-
-This endpoint supports two types of pagination:
-
-- Offset pagination
-- Checkpoint pagination
-
-Checkpoint pagination must be used if you need to retrieve more than 1000 connections.
-
-**Checkpoint Pagination**
-
-To search by checkpoint, use the following parameters:
+Rotate a client secret.
 
-- `from`: Optional id from which to start selection.
-- `take`: The total amount of entries to retrieve when using the from parameter. Defaults to 50.
+This endpoint cannot be used with clients configured with Private Key JWT authentication method (client_authentication_methods configured with private_key_jwt). The generated secret is NOT base64 encoded.
 
-**Note**: The first time you call this endpoint using checkpoint pagination, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no pages are remaining.
+For more information, read [Rotate Client Secrets](https://www.auth0.com/docs/get-started/applications/rotate-client-secret).
 </dd>
 </dl>
 </dd>
@@ -3221,19 +3018,7 @@ To search by checkpoint, use the following parameters:
 <dd>
 
 ```java
-client.connections().list(
-    ListConnectionsQueryParameters
-        .builder()
-        .from("from")
-        .take(1)
-        .name("name")
-        .fields("fields")
-        .includeFields(true)
-        .strategy(
-            Arrays.asList(ConnectionStrategyEnum.AD)
-        )
-        .build()
-);
+client.clients().rotateSecret("id");
 ```
 </dd>
 </dl>
@@ -3248,39 +3033,68 @@ client.connections().list(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Optional Id from which to start selection.
+**id:** `String` — ID of the client that will rotate secrets.
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
-    
 </dd>
 </dl>
+</details>
 
+## ConnectionProfiles
+<details><summary><code>client.connectionProfiles.list() -> SyncPagingIterable&amp;lt;ConnectionProfile&amp;gt;</code></summary>
 <dl>
 <dd>
 
-**strategy:** `Optional<ConnectionStrategyEnum>` — Provide strategies to only retrieve connections with such strategies
-    
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Retrieve a list of Connection Profiles. This endpoint supports Checkpoint pagination.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**name:** `Optional<String>` — Provide the name of the connection to retrieve
-    
+<dl>
+<dd>
+
+```java
+client.connectionProfiles().list(
+    ListConnectionProfileRequestParameters
+        .builder()
+        .from("from")
+        .take(1)
+        .build()
+);
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**fields:** `Optional<String>` — A comma separated list of fields to include or exclude (depending on include_fields) from the result, empty to retrieve all fields
+<dl>
+<dd>
+
+**from:** `Optional<String>` — Optional Id from which to start selection.
     
 </dd>
 </dl>
@@ -3288,7 +3102,7 @@ client.connections().list(
 <dl>
 <dd>
 
-**includeFields:** `Optional<Boolean>` — <code>true</code> if the fields specified are to be included in the result, <code>false</code> otherwise (defaults to <code>true</code>)
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 5.
     
 </dd>
 </dl>
@@ -3300,7 +3114,7 @@ client.connections().list(
 </dl>
 </details>
 
-<details><summary><code>client.connections.create(request) -> CreateConnectionResponseContent</code></summary>
+<details><summary><code>client.connectionProfiles.create(request) -> CreateConnectionProfileResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -3312,9 +3126,7 @@ client.connections().list(
 <dl>
 <dd>
 
-Creates a new connection according to the JSON object received in `body`.
-
-**Note:** If a connection with the same name was recently deleted and had a large number of associated users, the deletion may still be processing. Creating a new connection with that name before the deletion completes may fail or produce unexpected results.
+Create a Connection Profile.
 </dd>
 </dl>
 </dd>
@@ -3329,11 +3141,10 @@ Creates a new connection according to the JSON object received in `body`.
 <dd>
 
 ```java
-client.connections().create(
-    CreateConnectionRequestContent
+client.connectionProfiles().create(
+    CreateConnectionProfileRequestContent
         .builder()
         .name("name")
-        .strategy(ConnectionIdentityProviderEnum.AD)
         .build()
 );
 ```
@@ -3350,7 +3161,7 @@ client.connections().create(
 <dl>
 <dd>
 
-**name:** `String` — The name of the connection. Must start and end with an alphanumeric character and can only contain alphanumeric characters and '-'. Max length 128
+**name:** `String` 
     
 </dd>
 </dl>
@@ -3358,7 +3169,7 @@ client.connections().create(
 <dl>
 <dd>
 
-**displayName:** `Optional<String>` — Connection name used in the new universal login experience
+**organization:** `Optional<ConnectionProfileOrganization>` 
     
 </dd>
 </dl>
@@ -3366,7 +3177,7 @@ client.connections().create(
 <dl>
 <dd>
 
-**strategy:** `ConnectionIdentityProviderEnum` 
+**connectionNamePrefixTemplate:** `Optional<String>` 
     
 </dd>
 </dl>
@@ -3374,7 +3185,7 @@ client.connections().create(
 <dl>
 <dd>
 
-**options:** `Optional<ConnectionPropertiesOptions>` 
+**enabledFeatures:** `Optional<List<EnabledFeaturesEnum>>` 
     
 </dd>
 </dl>
@@ -3382,7 +3193,7 @@ client.connections().create(
 <dl>
 <dd>
 
-**enabledClients:** `Optional<List<String>>` — Use of this property is NOT RECOMMENDED. Use the PATCH /v2/connections/{id}/clients endpoint to enable the connection for a set of clients.
+**connectionConfig:** `Optional<ConnectionProfileConfig>` 
     
 </dd>
 </dl>
@@ -3390,64 +3201,47 @@ client.connections().create(
 <dl>
 <dd>
 
-**isDomainConnection:** `Optional<Boolean>` — <code>true</code> promotes to a domain-level connection so that third-party applications can use it. <code>false</code> does not promote the connection, so only first-party applications with the connection enabled can use it. (Defaults to <code>false</code>.)
+**strategyOverrides:** `Optional<ConnectionProfileStrategyOverrides>` 
     
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**showAsButton:** `Optional<Boolean>` — Enables showing a button for the connection in the login page (new experience only). If false, it will be usable only by HRD. (Defaults to <code>false</code>.)
-    
 </dd>
 </dl>
 
-<dl>
-<dd>
 
-**realms:** `Optional<List<String>>` — Defines the realms for which the connection will be used (ie: email domains). If the array is empty or the property is not specified, the connection name will be added as realm.
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.connectionProfiles.listTemplates() -> ListConnectionProfileTemplateResponseContent</code></summary>
 <dl>
 <dd>
 
-**metadata:** `Optional<Map<String, Optional<String>>>` 
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**authentication:** `Optional<ConnectionAuthenticationPurpose>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**connectedAccounts:** `Optional<ConnectionConnectedAccountsPurpose>` 
-    
+Retrieve a list of Connection Profile Templates.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**crossAppAccessRequestingApp:** `Optional<CrossAppAccessRequestingApp>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**crossAppAccessResourceApp:** `Optional<CreateCrossAppAccessResourceApp>` 
-    
+```java
+client.connectionProfiles().listTemplates();
+```
 </dd>
 </dl>
 </dd>
@@ -3458,7 +3252,7 @@ client.connections().create(
 </dl>
 </details>
 
-<details><summary><code>client.connections.get(id) -> GetConnectionResponseContent</code></summary>
+<details><summary><code>client.connectionProfiles.getTemplate(id) -> GetConnectionProfileTemplateResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -3470,7 +3264,7 @@ client.connections().create(
 <dl>
 <dd>
 
-Retrieve details for a specified [connection](https://auth0.com/docs/authenticate/identity-providers) along with options that can be used for identity provider configuration.
+Retrieve a Connection Profile Template.
 </dd>
 </dl>
 </dd>
@@ -3485,14 +3279,7 @@ Retrieve details for a specified [connection](https://auth0.com/docs/authenticat
 <dd>
 
 ```java
-client.connections().get(
-    "id",
-    GetConnectionRequestParameters
-        .builder()
-        .fields("fields")
-        .includeFields(true)
-        .build()
-);
+client.connectionProfiles().getTemplate("id");
 ```
 </dd>
 </dl>
@@ -3507,23 +3294,7 @@ client.connections().get(
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection to retrieve
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**fields:** `Optional<String>` — A comma separated list of fields to include or exclude (depending on include_fields) from the result, empty to retrieve all fields
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**includeFields:** `Optional<Boolean>` — <code>true</code> if the fields specified are to be included in the result, <code>false</code> otherwise (defaults to <code>true</code>)
+**id:** `String` — ID of the connection-profile-template to retrieve.
     
 </dd>
 </dl>
@@ -3535,7 +3306,7 @@ client.connections().get(
 </dl>
 </details>
 
-<details><summary><code>client.connections.delete(id)</code></summary>
+<details><summary><code>client.connectionProfiles.get(id) -> GetConnectionProfileResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -3547,9 +3318,7 @@ client.connections().get(
 <dl>
 <dd>
 
-Removes a specific [connection](https://auth0.com/docs/authenticate/identity-providers) from your tenant. This action cannot be undone. Once removed, users can no longer use this connection to authenticate.
-
-**Note:** If your connection has a large amount of users associated with it, please be aware that this operation can be long running after the response is returned and may impact concurrent [create connection](https://auth0.com/docs/api/management/v2/connections/post-connections) requests, if they use an identical connection name.
+Retrieve details about a single Connection Profile specified by ID.
 </dd>
 </dl>
 </dd>
@@ -3564,7 +3333,7 @@ Removes a specific [connection](https://auth0.com/docs/authenticate/identity-pro
 <dd>
 
 ```java
-client.connections().delete("id");
+client.connectionProfiles().get("id");
 ```
 </dd>
 </dl>
@@ -3579,7 +3348,7 @@ client.connections().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection to delete
+**id:** `String` — ID of the connection-profile to retrieve.
     
 </dd>
 </dl>
@@ -3591,7 +3360,7 @@ client.connections().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.connections.update(id, request) -> UpdateConnectionResponseContent</code></summary>
+<details><summary><code>client.connectionProfiles.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -3603,9 +3372,7 @@ client.connections().delete("id");
 <dl>
 <dd>
 
-Update details for a specific [connection](https://auth0.com/docs/authenticate/identity-providers), including option properties for identity provider configuration.
-
-**Note**: If you use the `options` parameter, the entire `options` object is overridden. To avoid partial data or other issues, ensure all parameters are present when using this option.
+Delete a single Connection Profile specified by ID.
 </dd>
 </dl>
 </dd>
@@ -3620,12 +3387,7 @@ Update details for a specific [connection](https://auth0.com/docs/authenticate/i
 <dd>
 
 ```java
-client.connections().update(
-    "id",
-    UpdateConnectionRequestContent
-        .builder()
-        .build()
-);
+client.connectionProfiles().delete("id");
 ```
 </dd>
 </dl>
@@ -3640,47 +3402,66 @@ client.connections().update(
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection to update
+**id:** `String` — ID of the connection-profile to delete.
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**displayName:** `Optional<String>` — The connection name used in the new universal login experience. If display_name is not included in the request, the field will be overwritten with the name value.
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.connectionProfiles.update(id, request) -> UpdateConnectionProfileResponseContent</code></summary>
 <dl>
 <dd>
 
-**options:** `Optional<UpdateConnectionOptions>` 
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**enabledClients:** `Optional<List<String>>` — DEPRECATED property. Use the PATCH /v2/connections/{id}/clients endpoint to enable or disable the connection for any clients.
-    
-</dd>
+<dl>
+<dd>
+
+Update the details of a specific Connection Profile.
+</dd>
+</dl>
+</dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**isDomainConnection:** `Optional<Boolean>` — <code>true</code> promotes to a domain-level connection so that third-party applications can use it. <code>false</code> does not promote the connection, so only first-party applications with the connection enabled can use it. (Defaults to <code>false</code>.)
-    
+<dl>
+<dd>
+
+```java
+client.connectionProfiles().update(
+    "id",
+    UpdateConnectionProfileRequestContent
+        .builder()
+        .build()
+);
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**showAsButton:** `Optional<Boolean>` — Enables showing a button for the connection in the login page (new experience only). If false, it will be usable only by HRD. (Defaults to <code>false</code>.)
+<dl>
+<dd>
+
+**id:** `String` — ID of the connection profile to update.
     
 </dd>
 </dl>
@@ -3688,7 +3469,7 @@ client.connections().update(
 <dl>
 <dd>
 
-**realms:** `Optional<List<String>>` — Defines the realms for which the connection will be used (ie: email domains). If the array is empty or the property is not specified, the connection name will be added as realm.
+**name:** `Optional<String>` 
     
 </dd>
 </dl>
@@ -3696,7 +3477,7 @@ client.connections().update(
 <dl>
 <dd>
 
-**metadata:** `Optional<Map<String, Optional<String>>>` 
+**organization:** `Optional<ConnectionProfileOrganization>` 
     
 </dd>
 </dl>
@@ -3704,7 +3485,7 @@ client.connections().update(
 <dl>
 <dd>
 
-**authentication:** `Optional<ConnectionAuthenticationPurpose>` 
+**connectionNamePrefixTemplate:** `Optional<String>` 
     
 </dd>
 </dl>
@@ -3712,7 +3493,7 @@ client.connections().update(
 <dl>
 <dd>
 
-**connectedAccounts:** `Optional<ConnectionConnectedAccountsPurpose>` 
+**enabledFeatures:** `Optional<List<EnabledFeaturesEnum>>` 
     
 </dd>
 </dl>
@@ -3720,7 +3501,7 @@ client.connections().update(
 <dl>
 <dd>
 
-**crossAppAccessRequestingApp:** `Optional<CrossAppAccessRequestingApp>` 
+**connectionConfig:** `Optional<ConnectionProfileConfig>` 
     
 </dd>
 </dl>
@@ -3728,7 +3509,7 @@ client.connections().update(
 <dl>
 <dd>
 
-**crossAppAccessResourceApp:** `Optional<UpdateCrossAppAccessResourceApp>` 
+**strategyOverrides:** `Optional<ConnectionProfileStrategyOverrides>` 
     
 </dd>
 </dl>
@@ -3740,7 +3521,8 @@ client.connections().update(
 </dl>
 </details>
 
-<details><summary><code>client.connections.checkStatus(id)</code></summary>
+## Connections
+<details><summary><code>client.connections.list() -> SyncPagingIterable&amp;lt;ConnectionForList&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -3752,7 +3534,23 @@ client.connections().update(
 <dl>
 <dd>
 
-Retrieves the status of an ad/ldap connection referenced by its `ID`. `200 OK` http status code response is returned  when the connection is online, otherwise a `404` status code is returned along with an error message
+Retrieves detailed list of all [connections](https://auth0.com/docs/authenticate/identity-providers) that match the specified strategy. If no strategy is provided, all connections within your tenant are retrieved. This action can accept a list of fields to include or exclude from the resulting list of connections. 
+
+This endpoint supports two types of pagination:
+
+- Offset pagination
+- Checkpoint pagination
+
+Checkpoint pagination must be used if you need to retrieve more than 1000 connections.
+
+**Checkpoint Pagination**
+
+To search by checkpoint, use the following parameters:
+
+- `from`: Optional id from which to start selection.
+- `take`: The total amount of entries to retrieve when using the from parameter. Defaults to 50.
+
+**Note**: The first time you call this endpoint using checkpoint pagination, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no pages are remaining.
 </dd>
 </dl>
 </dd>
@@ -3767,7 +3565,20 @@ Retrieves the status of an ad/ldap connection referenced by its `ID`. `200 OK` h
 <dd>
 
 ```java
-client.connections().checkStatus("id");
+client.connections().list(
+    ListConnectionsQueryParameters
+        .builder()
+        .includeTotals(true)
+        .from("from")
+        .take(1)
+        .name("name")
+        .fields("fields")
+        .includeFields(true)
+        .strategy(
+            Arrays.asList(ConnectionStrategyEnum.AD)
+        )
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -3782,70 +3593,31 @@ client.connections().checkStatus("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the connection to check
+**includeTotals:** `Optional<Boolean>` — true if a query summary must be included in the result, false otherwise. Not returned when using checkpoint pagination. Default <code>false</code>.
     
 </dd>
 </dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-## CustomDomains
-<details><summary><code>client.customDomains.list() -> List&amp;lt;CustomDomain&amp;gt;</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
 
 <dl>
 <dd>
 
-Retrieve details on [custom domains](https://auth0.com/docs/custom-domains).
-</dd>
-</dl>
+**from:** `Optional<String>` — Optional Id from which to start selection.
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
-<dl>
-<dd>
-
-```java
-client.customDomains().list(
-    ListCustomDomainsRequestParameters
-        .builder()
-        .q("q")
-        .fields("fields")
-        .includeFields(true)
-        .sort("sort")
-        .build()
-);
-```
-</dd>
-</dl>
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
-<dl>
-<dd>
-
-**q:** `Optional<String>` — Query in <a href ="https://lucene.apache.org/core/2_9_4/queryparsersyntax.html">Lucene query string syntax</a>.
+**strategy:** `Optional<ConnectionStrategyEnum>` — Provide strategies to only retrieve connections with such strategies
     
 </dd>
 </dl>
@@ -3853,7 +3625,7 @@ client.customDomains().list(
 <dl>
 <dd>
 
-**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
+**name:** `Optional<String>` — Provide the name of the connection to retrieve
     
 </dd>
 </dl>
@@ -3861,7 +3633,7 @@ client.customDomains().list(
 <dl>
 <dd>
 
-**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
+**fields:** `Optional<String>` — A comma separated list of fields to include or exclude (depending on include_fields) from the result, empty to retrieve all fields
     
 </dd>
 </dl>
@@ -3869,7 +3641,7 @@ client.customDomains().list(
 <dl>
 <dd>
 
-**sort:** `Optional<String>` — Field to sort by. Only <code>domain:1</code> (ascending order by domain) is supported at this time.
+**includeFields:** `Optional<Boolean>` — <code>true</code> if the fields specified are to be included in the result, <code>false</code> otherwise (defaults to <code>true</code>)
     
 </dd>
 </dl>
@@ -3881,7 +3653,7 @@ client.customDomains().list(
 </dl>
 </details>
 
-<details><summary><code>client.customDomains.create(request) -> CreateCustomDomainResponseContent</code></summary>
+<details><summary><code>client.connections.create(request) -> CreateConnectionResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -3893,19 +3665,9 @@ client.customDomains().list(
 <dl>
 <dd>
 
-Create a new custom domain.
-
-Note: The custom domain will need to be verified before it will accept
-requests.
-
-Optional attributes that can be updated:
-
-- custom_client_ip_header
-- tls_policy
-
-TLS Policies:
+Creates a new connection according to the JSON object received in `body`.
 
-- recommended - for modern usage this includes TLS 1.2 only
+**Note:** If a connection with the same name was recently deleted and had a large number of associated users, the deletion may still be processing. Creating a new connection with that name before the deletion completes may fail or produce unexpected results.
 </dd>
 </dl>
 </dd>
@@ -3920,11 +3682,11 @@ TLS Policies:
 <dd>
 
 ```java
-client.customDomains().create(
-    CreateCustomDomainRequestContent
+client.connections().create(
+    CreateConnectionRequestContent
         .builder()
-        .domain("domain")
-        .type(CustomDomainProvisioningTypeEnum.AUTH0MANAGED_CERTS)
+        .name("name")
+        .strategy(ConnectionIdentityProviderEnum.AD)
         .build()
 );
 ```
@@ -3941,7 +3703,7 @@ client.customDomains().create(
 <dl>
 <dd>
 
-**domain:** `String` — Domain name.
+**name:** `String` — The name of the connection. Must start and end with an alphanumeric character and can only contain alphanumeric characters and '-'. Max length 128
     
 </dd>
 </dl>
@@ -3949,7 +3711,7 @@ client.customDomains().create(
 <dl>
 <dd>
 
-**type:** `CustomDomainProvisioningTypeEnum` 
+**displayName:** `Optional<String>` — Connection name used in the new universal login experience
     
 </dd>
 </dl>
@@ -3957,7 +3719,7 @@ client.customDomains().create(
 <dl>
 <dd>
 
-**verificationMethod:** `Optional<CustomDomainVerificationMethodEnum>` 
+**strategy:** `ConnectionIdentityProviderEnum` 
     
 </dd>
 </dl>
@@ -3965,7 +3727,7 @@ client.customDomains().create(
 <dl>
 <dd>
 
-**tlsPolicy:** `Optional<CustomDomainTlsPolicyEnum>` 
+**options:** `Optional<ConnectionPropertiesOptions>` 
     
 </dd>
 </dl>
@@ -3973,7 +3735,7 @@ client.customDomains().create(
 <dl>
 <dd>
 
-**customClientIpHeader:** `Optional<CustomDomainCustomClientIpHeaderEnum>` 
+**enabledClients:** `Optional<List<String>>` — Use of this property is NOT RECOMMENDED. Use the PATCH /v2/connections/{id}/clients endpoint to enable the connection for a set of clients.
     
 </dd>
 </dl>
@@ -3981,7 +3743,7 @@ client.customDomains().create(
 <dl>
 <dd>
 
-**domainMetadata:** `Optional<Map<String, Optional<String>>>` 
+**isDomainConnection:** `Optional<Boolean>` — <code>true</code> promotes to a domain-level connection so that third-party applications can use it. <code>false</code> does not promote the connection, so only first-party applications with the connection enabled can use it. (Defaults to <code>false</code>.)
     
 </dd>
 </dl>
@@ -3989,47 +3751,56 @@ client.customDomains().create(
 <dl>
 <dd>
 
-**relyingPartyIdentifier:** `Optional<String>` — Relying Party ID (rpId) to be used for Passkeys on this custom domain. If not provided, the full domain will be used.
+**showAsButton:** `Optional<Boolean>` — Enables showing a button for the connection in the login page (new experience only). If false, it will be usable only by HRD. (Defaults to <code>false</code>.)
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
+**realms:** `Optional<List<String>>` — Defines the realms for which the connection will be used (ie: email domains). If the array is empty or the property is not specified, the connection name will be added as realm.
+    
 </dd>
 </dl>
-</details>
 
-<details><summary><code>client.customDomains.getDefault() -> GetDefaultDomainResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+**metadata:** `Optional<Map<String, Optional<String>>>` 
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**authentication:** `Optional<ConnectionAuthenticationPurpose>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-Retrieve the tenant's default domain.
-</dd>
-</dl>
+**connectedAccounts:** `Optional<ConnectionConnectedAccountsPurpose>` 
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
+**crossAppAccessRequestingApp:** `Optional<CrossAppAccessRequestingApp>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-```java
-client.customDomains().getDefault();
-```
+**crossAppAccessResourceApp:** `Optional<CreateCrossAppAccessResourceApp>` 
+    
 </dd>
 </dl>
 </dd>
@@ -4040,7 +3811,7 @@ client.customDomains().getDefault();
 </dl>
 </details>
 
-<details><summary><code>client.customDomains.setDefault(request) -> UpdateDefaultDomainResponseContent</code></summary>
+<details><summary><code>client.connections.get(id) -> GetConnectionResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -4052,7 +3823,7 @@ client.customDomains().getDefault();
 <dl>
 <dd>
 
-Set the default custom domain for the tenant.
+Retrieve details for a specified [connection](https://auth0.com/docs/authenticate/identity-providers) along with options that can be used for identity provider configuration.
 </dd>
 </dl>
 </dd>
@@ -4067,10 +3838,12 @@ Set the default custom domain for the tenant.
 <dd>
 
 ```java
-client.customDomains().setDefault(
-    SetDefaultCustomDomainRequestContent
+client.connections().get(
+    "id",
+    GetConnectionRequestParameters
         .builder()
-        .domain("domain")
+        .fields("fields")
+        .includeFields(true)
         .build()
 );
 ```
@@ -4087,7 +3860,23 @@ client.customDomains().setDefault(
 <dl>
 <dd>
 
-**domain:** `String` — The domain to set as the default custom domain. Must be a verified custom domain or the canonical domain.
+**id:** `String` — The id of the connection to retrieve
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**fields:** `Optional<String>` — A comma separated list of fields to include or exclude (depending on include_fields) from the result, empty to retrieve all fields
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**includeFields:** `Optional<Boolean>` — <code>true</code> if the fields specified are to be included in the result, <code>false</code> otherwise (defaults to <code>true</code>)
     
 </dd>
 </dl>
@@ -4099,7 +3888,7 @@ client.customDomains().setDefault(
 </dl>
 </details>
 
-<details><summary><code>client.customDomains.get(id) -> GetCustomDomainResponseContent</code></summary>
+<details><summary><code>client.connections.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -4111,7 +3900,9 @@ client.customDomains().setDefault(
 <dl>
 <dd>
 
-Retrieve a custom domain configuration and status.
+Removes a specific [connection](https://auth0.com/docs/authenticate/identity-providers) from your tenant. This action cannot be undone. Once removed, users can no longer use this connection to authenticate.
+
+**Note:** If your connection has a large amount of users associated with it, please be aware that this operation can be long running after the response is returned and may impact concurrent [create connection](https://auth0.com/docs/api/management/v2/connections/post-connections) requests, if they use an identical connection name.
 </dd>
 </dl>
 </dd>
@@ -4126,7 +3917,7 @@ Retrieve a custom domain configuration and status.
 <dd>
 
 ```java
-client.customDomains().get("id");
+client.connections().delete("id");
 ```
 </dd>
 </dl>
@@ -4141,7 +3932,7 @@ client.customDomains().get("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the custom domain to retrieve.
+**id:** `String` — The id of the connection to delete
     
 </dd>
 </dl>
@@ -4153,7 +3944,7 @@ client.customDomains().get("id");
 </dl>
 </details>
 
-<details><summary><code>client.customDomains.delete(id)</code></summary>
+<details><summary><code>client.connections.update(id, request) -> UpdateConnectionResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -4165,7 +3956,9 @@ client.customDomains().get("id");
 <dl>
 <dd>
 
-Delete a custom domain and stop serving requests for it.
+Update details for a specific [connection](https://auth0.com/docs/authenticate/identity-providers), including option properties for identity provider configuration.
+
+**Note**: If you use the `options` parameter, the entire `options` object is overridden. To avoid partial data or other issues, ensure all parameters are present when using this option.
 </dd>
 </dl>
 </dd>
@@ -4180,8 +3973,13 @@ Delete a custom domain and stop serving requests for it.
 <dd>
 
 ```java
-client.customDomains().delete("id");
-```
+client.connections().update(
+    "id",
+    UpdateConnectionRequestContent
+        .builder()
+        .build()
+);
+```
 </dd>
 </dl>
 </dd>
@@ -4195,97 +3993,63 @@ client.customDomains().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the custom domain to delete.
+**id:** `String` — The id of the connection to update
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
+**displayName:** `Optional<String>` — The connection name used in the new universal login experience. If display_name is not included in the request, the field will be overwritten with the name value.
+    
 </dd>
 </dl>
-</details>
 
-<details><summary><code>client.customDomains.update(id, request) -> UpdateCustomDomainResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
-
-<dl>
-<dd>
+**options:** `Optional<UpdateConnectionOptions>` 
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
-Update a custom domain.
-
-These are the attributes that can be updated:
-
-- custom_client_ip_header
-- tls_policy
-
-**Updating CUSTOM_CLIENT_IP_HEADER for a custom domain**
-
-To update the `custom_client_ip_header` for a domain, the body to
-send should be:
-
-```json
-{ "custom_client_ip_header": "cf-connecting-ip" }
-```
-
-**Updating TLS_POLICY for a custom domain**
-
-To update the `tls_policy` for a domain, the body to send should be:
-
-```json
-{ "tls_policy": "recommended" }
-```
-
-TLS Policies:
-
-- recommended - for modern usage this includes TLS 1.2 only
-
-Some considerations:
-
-- The TLS ciphers and protocols available in each TLS policy follow industry recommendations, and may be updated occasionally.
-- The `compatible` TLS policy is no longer supported.
-</dd>
-</dl>
+**enabledClients:** `Optional<List<String>>` — DEPRECATED property. Use the PATCH /v2/connections/{id}/clients endpoint to enable or disable the connection for any clients.
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
+**isDomainConnection:** `Optional<Boolean>` — <code>true</code> promotes to a domain-level connection so that third-party applications can use it. <code>false</code> does not promote the connection, so only first-party applications with the connection enabled can use it. (Defaults to <code>false</code>.)
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-```java
-client.customDomains().update(
-    "id",
-    UpdateCustomDomainRequestContent
-        .builder()
-        .build()
-);
-```
-</dd>
-</dl>
+**showAsButton:** `Optional<Boolean>` — Enables showing a button for the connection in the login page (new experience only). If false, it will be usable only by HRD. (Defaults to <code>false</code>.)
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**realms:** `Optional<List<String>>` — Defines the realms for which the connection will be used (ie: email domains). If the array is empty or the property is not specified, the connection name will be added as realm.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**id:** `String` — The id of the custom domain to update
+**metadata:** `Optional<Map<String, Optional<String>>>` 
     
 </dd>
 </dl>
@@ -4293,7 +4057,7 @@ client.customDomains().update(
 <dl>
 <dd>
 
-**tlsPolicy:** `Optional<CustomDomainTlsPolicyEnum>` — recommended includes TLS 1.2
+**authentication:** `Optional<ConnectionAuthenticationPurpose>` 
     
 </dd>
 </dl>
@@ -4301,7 +4065,7 @@ client.customDomains().update(
 <dl>
 <dd>
 
-**customClientIpHeader:** `Optional<CustomDomainCustomClientIpHeaderEnum>` 
+**connectedAccounts:** `Optional<ConnectionConnectedAccountsPurpose>` 
     
 </dd>
 </dl>
@@ -4309,7 +4073,7 @@ client.customDomains().update(
 <dl>
 <dd>
 
-**domainMetadata:** `Optional<Map<String, Optional<String>>>` 
+**crossAppAccessRequestingApp:** `Optional<CrossAppAccessRequestingApp>` 
     
 </dd>
 </dl>
@@ -4317,7 +4081,7 @@ client.customDomains().update(
 <dl>
 <dd>
 
-**relyingPartyIdentifier:** `Optional<String>` — Relying Party ID (rpId) to be used for Passkeys on this custom domain. Set to null to remove the rpId and fall back to using the full domain.
+**crossAppAccessResourceApp:** `Optional<UpdateCrossAppAccessResourceApp>` 
     
 </dd>
 </dl>
@@ -4329,7 +4093,7 @@ client.customDomains().update(
 </dl>
 </details>
 
-<details><summary><code>client.customDomains.test(id) -> TestCustomDomainResponseContent</code></summary>
+<details><summary><code>client.connections.checkStatus(id)</code></summary>
 <dl>
 <dd>
 
@@ -4341,7 +4105,7 @@ client.customDomains().update(
 <dl>
 <dd>
 
-Run the test process on a custom domain.
+Retrieves the status of an ad/ldap connection referenced by its `ID`. `200 OK` http status code response is returned  when the connection is online, otherwise a `404` status code is returned along with an error message
 </dd>
 </dl>
 </dd>
@@ -4356,7 +4120,7 @@ Run the test process on a custom domain.
 <dd>
 
 ```java
-client.customDomains().test("id");
+client.connections().checkStatus("id");
 ```
 </dd>
 </dl>
@@ -4371,7 +4135,7 @@ client.customDomains().test("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the custom domain to test.
+**id:** `String` — ID of the connection to check
     
 </dd>
 </dl>
@@ -4383,7 +4147,8 @@ client.customDomains().test("id");
 </dl>
 </details>
 
-<details><summary><code>client.customDomains.verify(id) -> VerifyCustomDomainResponseContent</code></summary>
+## CustomDomains
+<details><summary><code>client.customDomains.list() -> List&amp;lt;CustomDomain&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -4395,14 +4160,7 @@ client.customDomains().test("id");
 <dl>
 <dd>
 
-Run the verification process on a custom domain.
-
-Note: Check the `status` field to see its verification status. Once verification is complete, it may take up to 10 minutes before the custom domain can start accepting requests.
-
-For `self_managed_certs`, when the custom domain is verified for the first time, the response will also include the `cname_api_key` which you will need to configure your proxy. This key must be kept secret, and is used to validate the proxy requests.
-
-[Learn more](https://auth0.com/docs/custom-domains#step-2-verify-ownership) about verifying custom domains that use Auth0 Managed certificates.
-[Learn more](https://auth0.com/docs/custom-domains/self-managed-certificates#step-2-verify-ownership) about verifying custom domains that use Self Managed certificates.
+Retrieve details on [custom domains](https://auth0.com/docs/custom-domains).
 </dd>
 </dl>
 </dd>
@@ -4417,7 +4175,15 @@ For `self_managed_certs`, when the custom domain is verified for the first time,
 <dd>
 
 ```java
-client.customDomains().verify("id");
+client.customDomains().list(
+    ListCustomDomainsRequestParameters
+        .builder()
+        .q("q")
+        .fields("fields")
+        .includeFields(true)
+        .sort("sort")
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -4432,7 +4198,31 @@ client.customDomains().verify("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the custom domain to verify.
+**q:** `Optional<String>` — Query in <a href ="https://lucene.apache.org/core/2_9_4/queryparsersyntax.html">Lucene query string syntax</a>.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**sort:** `Optional<String>` — Field to sort by. Only <code>domain:1</code> (ascending order by domain) is supported at this time.
     
 </dd>
 </dl>
@@ -4444,8 +4234,7 @@ client.customDomains().verify("id");
 </dl>
 </details>
 
-## DeviceCredentials
-<details><summary><code>client.deviceCredentials.list() -> SyncPagingIterable&amp;lt;DeviceCredential&amp;gt;</code></summary>
+<details><summary><code>client.customDomains.create(request) -> CreateCustomDomainResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -4457,7 +4246,19 @@ client.customDomains().verify("id");
 <dl>
 <dd>
 
-Retrieve device credential information (`public_key`, `refresh_token`, or `rotating_refresh_token`) associated with a specific user.
+Create a new custom domain.
+
+Note: The custom domain will need to be verified before it will accept
+requests.
+
+Optional attributes that can be updated:
+
+- custom_client_ip_header
+- tls_policy
+
+TLS Policies:
+
+- recommended - for modern usage this includes TLS 1.2 only
 </dd>
 </dl>
 </dd>
@@ -4472,17 +4273,11 @@ Retrieve device credential information (`public_key`, `refresh_token`, or `rotat
 <dd>
 
 ```java
-client.deviceCredentials().list(
-    ListDeviceCredentialsRequestParameters
+client.customDomains().create(
+    CreateCustomDomainRequestContent
         .builder()
-        .page(1)
-        .perPage(1)
-        .includeTotals(true)
-        .fields("fields")
-        .includeFields(true)
-        .userId("user_id")
-        .clientId("client_id")
-        .type(DeviceCredentialTypeEnum.PUBLIC_KEY)
+        .domain("domain")
+        .type(CustomDomainProvisioningTypeEnum.AUTH0MANAGED_CERTS)
         .build()
 );
 ```
@@ -4499,7 +4294,7 @@ client.deviceCredentials().list(
 <dl>
 <dd>
 
-**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
+**domain:** `String` — Domain name.
     
 </dd>
 </dl>
@@ -4507,7 +4302,7 @@ client.deviceCredentials().list(
 <dl>
 <dd>
 
-**perPage:** `Optional<Integer>` — Number of results per page.  There is a maximum of 1000 results allowed from this endpoint.
+**type:** `CustomDomainProvisioningTypeEnum` 
     
 </dd>
 </dl>
@@ -4515,7 +4310,7 @@ client.deviceCredentials().list(
 <dl>
 <dd>
 
-**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+**verificationMethod:** `Optional<CustomDomainVerificationMethodEnum>` 
     
 </dd>
 </dl>
@@ -4523,7 +4318,7 @@ client.deviceCredentials().list(
 <dl>
 <dd>
 
-**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
+**tlsPolicy:** `Optional<CustomDomainTlsPolicyEnum>` 
     
 </dd>
 </dl>
@@ -4531,7 +4326,7 @@ client.deviceCredentials().list(
 <dl>
 <dd>
 
-**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
+**customClientIpHeader:** `Optional<CustomDomainCustomClientIpHeaderEnum>` 
     
 </dd>
 </dl>
@@ -4539,7 +4334,7 @@ client.deviceCredentials().list(
 <dl>
 <dd>
 
-**userId:** `Optional<String>` — user_id of the devices to retrieve.
+**domainMetadata:** `Optional<Map<String, Optional<String>>>` 
     
 </dd>
 </dl>
@@ -4547,16 +4342,47 @@ client.deviceCredentials().list(
 <dl>
 <dd>
 
-**clientId:** `Optional<String>` — client_id of the devices to retrieve.
+**relyingPartyIdentifier:** `Optional<String>` — Relying Party ID (rpId) to be used for Passkeys on this custom domain. If not provided, the full domain will be used.
     
 </dd>
 </dl>
+</dd>
+</dl>
 
+
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.customDomains.getDefault() -> GetDefaultDomainResponseContent</code></summary>
 <dl>
 <dd>
 
-**type:** `Optional<DeviceCredentialTypeEnum>` — Type of credentials to retrieve. Must be `public_key`, `refresh_token` or `rotating_refresh_token`. The property will default to `refresh_token` when paging is requested
-    
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Retrieve the tenant's default domain.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.customDomains().getDefault();
+```
 </dd>
 </dl>
 </dd>
@@ -4567,7 +4393,7 @@ client.deviceCredentials().list(
 </dl>
 </details>
 
-<details><summary><code>client.deviceCredentials.createPublicKey(request) -> CreatePublicKeyDeviceCredentialResponseContent</code></summary>
+<details><summary><code>client.customDomains.setDefault(request) -> UpdateDefaultDomainResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -4579,9 +4405,7 @@ client.deviceCredentials().list(
 <dl>
 <dd>
 
-Create a device credential public key to manage refresh token rotation for a given `user_id`. Device Credentials APIs are designed for ad-hoc administrative use only and paging is by default enabled for GET requests.
-
-When refresh token rotation is enabled, the endpoint becomes consistent. For more information, read [Signing Keys](https://auth0.com/docs/get-started/tenant-settings/signing-keys).
+Set the default custom domain for the tenant.
 </dd>
 </dl>
 </dd>
@@ -4596,13 +4420,10 @@ When refresh token rotation is enabled, the endpoint becomes consistent. For mor
 <dd>
 
 ```java
-client.deviceCredentials().createPublicKey(
-    CreatePublicKeyDeviceCredentialRequestContent
+client.customDomains().setDefault(
+    SetDefaultCustomDomainRequestContent
         .builder()
-        .deviceName("device_name")
-        .type(DeviceCredentialPublicKeyTypeEnum.PUBLIC_KEY)
-        .value("value")
-        .deviceId("device_id")
+        .domain("domain")
         .build()
 );
 ```
@@ -4619,39 +4440,61 @@ client.deviceCredentials().createPublicKey(
 <dl>
 <dd>
 
-**deviceName:** `String` — Name for this device easily recognized by owner.
+**domain:** `String` — The domain to set as the default custom domain. Must be a verified custom domain or the canonical domain.
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**type:** `DeviceCredentialPublicKeyTypeEnum` 
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.customDomains.get(id) -> GetCustomDomainResponseContent</code></summary>
 <dl>
 <dd>
 
-**value:** `String` — Base64 encoded string containing the credential.
-    
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Retrieve a custom domain configuration and status.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**deviceId:** `String` — Unique identifier for the device. Recommend using <a href="http://developer.android.com/reference/android/provider/Settings.Secure.html#ANDROID_ID">Android_ID</a> on Android and <a href="https://developer.apple.com/library/ios/documentation/UIKit/Reference/UIDevice_Class/index.html#//apple_ref/occ/instp/UIDevice/identifierForVendor">identifierForVendor</a>.
-    
+<dl>
+<dd>
+
+```java
+client.customDomains().get("id");
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**clientId:** `Optional<String>` — client_id of the client (application) this credential is for.
+<dl>
+<dd>
+
+**id:** `String` — ID of the custom domain to retrieve.
     
 </dd>
 </dl>
@@ -4663,7 +4506,7 @@ client.deviceCredentials().createPublicKey(
 </dl>
 </details>
 
-<details><summary><code>client.deviceCredentials.delete(id)</code></summary>
+<details><summary><code>client.customDomains.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -4675,7 +4518,7 @@ client.deviceCredentials().createPublicKey(
 <dl>
 <dd>
 
-Permanently delete a device credential (such as a refresh token or public key) with the given ID.
+Delete a custom domain and stop serving requests for it.
 </dd>
 </dl>
 </dd>
@@ -4690,7 +4533,7 @@ Permanently delete a device credential (such as a refresh token or public key) w
 <dd>
 
 ```java
-client.deviceCredentials().delete("id");
+client.customDomains().delete("id");
 ```
 </dd>
 </dl>
@@ -4705,7 +4548,7 @@ client.deviceCredentials().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the credential to delete.
+**id:** `String` — ID of the custom domain to delete.
     
 </dd>
 </dl>
@@ -4717,8 +4560,7 @@ client.deviceCredentials().delete("id");
 </dl>
 </details>
 
-## EmailTemplates
-<details><summary><code>client.emailTemplates.create(request) -> CreateEmailTemplateResponseContent</code></summary>
+<details><summary><code>client.customDomains.update(id, request) -> UpdateCustomDomainResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -4730,7 +4572,38 @@ client.deviceCredentials().delete("id");
 <dl>
 <dd>
 
-Create an email template.
+Update a custom domain.
+
+These are the attributes that can be updated:
+
+- custom_client_ip_header
+- tls_policy
+
+**Updating CUSTOM_CLIENT_IP_HEADER for a custom domain**
+
+To update the `custom_client_ip_header` for a domain, the body to
+send should be:
+
+```json
+{ "custom_client_ip_header": "cf-connecting-ip" }
+```
+
+**Updating TLS_POLICY for a custom domain**
+
+To update the `tls_policy` for a domain, the body to send should be:
+
+```json
+{ "tls_policy": "recommended" }
+```
+
+TLS Policies:
+
+- recommended - for modern usage this includes TLS 1.2 only
+
+Some considerations:
+
+- The TLS ciphers and protocols available in each TLS policy follow industry recommendations, and may be updated occasionally.
+- The `compatible` TLS policy is no longer supported.
 </dd>
 </dl>
 </dd>
@@ -4745,10 +4618,10 @@ Create an email template.
 <dd>
 
 ```java
-client.emailTemplates().create(
-    CreateEmailTemplateRequestContent
+client.customDomains().update(
+    "id",
+    UpdateCustomDomainRequestContent
         .builder()
-        .template(EmailTemplateNameEnum.VERIFY_EMAIL)
         .build()
 );
 ```
@@ -4765,7 +4638,7 @@ client.emailTemplates().create(
 <dl>
 <dd>
 
-**template:** `EmailTemplateNameEnum` 
+**id:** `String` — The id of the custom domain to update
     
 </dd>
 </dl>
@@ -4773,7 +4646,7 @@ client.emailTemplates().create(
 <dl>
 <dd>
 
-**body:** `Optional<String>` — Body of the email template.
+**tlsPolicy:** `Optional<CustomDomainTlsPolicyEnum>` — recommended includes TLS 1.2
     
 </dd>
 </dl>
@@ -4781,7 +4654,7 @@ client.emailTemplates().create(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Senders `from` email address.
+**customClientIpHeader:** `Optional<CustomDomainCustomClientIpHeaderEnum>` 
     
 </dd>
 </dl>
@@ -4789,7 +4662,7 @@ client.emailTemplates().create(
 <dl>
 <dd>
 
-**resultUrl:** `Optional<String>` — URL to redirect the user to after a successful action.
+**domainMetadata:** `Optional<Map<String, Optional<String>>>` 
     
 </dd>
 </dl>
@@ -4797,39 +4670,61 @@ client.emailTemplates().create(
 <dl>
 <dd>
 
-**subject:** `Optional<String>` — Subject line of the email.
+**relyingPartyIdentifier:** `Optional<String>` — Relying Party ID (rpId) to be used for Passkeys on this custom domain. Set to null to remove the rpId and fall back to using the full domain.
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**syntax:** `Optional<String>` — Syntax of the template body.
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.customDomains.test(id) -> TestCustomDomainResponseContent</code></summary>
 <dl>
 <dd>
 
-**urlLifetimeInSeconds:** `Optional<Double>` — Lifetime in seconds that the link within the email will be valid for.
-    
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Run the test process on a custom domain.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**includeEmailInRedirect:** `Optional<Boolean>` — Whether the `reset_email` and `verify_email` templates should include the user's email address as the `email` parameter in the returnUrl (true) or whether no email address should be included in the redirect (false). Defaults to true.
-    
+<dl>
+<dd>
+
+```java
+client.customDomains().test("id");
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**enabled:** `Optional<Boolean>` — Whether the template is enabled (true) or disabled (false).
+<dl>
+<dd>
+
+**id:** `String` — ID of the custom domain to test.
     
 </dd>
 </dl>
@@ -4841,7 +4736,7 @@ client.emailTemplates().create(
 </dl>
 </details>
 
-<details><summary><code>client.emailTemplates.get(templateName) -> GetEmailTemplateResponseContent</code></summary>
+<details><summary><code>client.customDomains.verify(id) -> VerifyCustomDomainResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -4853,7 +4748,14 @@ client.emailTemplates().create(
 <dl>
 <dd>
 
-Retrieve an email template by pre-defined name. These names are `verify_email`, `verify_email_by_code`, `auth_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, and `async_approval`. The names `change_password`, and `password_reset` are also supported for legacy scenarios.
+Run the verification process on a custom domain.
+
+Note: Check the `status` field to see its verification status. Once verification is complete, it may take up to 10 minutes before the custom domain can start accepting requests.
+
+For `self_managed_certs`, when the custom domain is verified for the first time, the response will also include the `cname_api_key` which you will need to configure your proxy. This key must be kept secret, and is used to validate the proxy requests.
+
+[Learn more](https://auth0.com/docs/custom-domains#step-2-verify-ownership) about verifying custom domains that use Auth0 Managed certificates.
+[Learn more](https://auth0.com/docs/custom-domains/self-managed-certificates#step-2-verify-ownership) about verifying custom domains that use Self Managed certificates.
 </dd>
 </dl>
 </dd>
@@ -4868,7 +4770,7 @@ Retrieve an email template by pre-defined name. These names are `verify_email`,
 <dd>
 
 ```java
-client.emailTemplates().get(EmailTemplateNameEnum.VERIFY_EMAIL);
+client.customDomains().verify("id");
 ```
 </dd>
 </dl>
@@ -4883,7 +4785,7 @@ client.emailTemplates().get(EmailTemplateNameEnum.VERIFY_EMAIL);
 <dl>
 <dd>
 
-**templateName:** `EmailTemplateNameEnum` — Template name. Can be `verify_email`, `verify_email_by_code`, `auth_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, `async_approval`, `change_password` (legacy), or `password_reset` (legacy).
+**id:** `String` — ID of the custom domain to verify.
     
 </dd>
 </dl>
@@ -4895,7 +4797,8 @@ client.emailTemplates().get(EmailTemplateNameEnum.VERIFY_EMAIL);
 </dl>
 </details>
 
-<details><summary><code>client.emailTemplates.set(templateName, request) -> SetEmailTemplateResponseContent</code></summary>
+## DeviceCredentials
+<details><summary><code>client.deviceCredentials.list() -> SyncPagingIterable&amp;lt;DeviceCredential&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -4907,7 +4810,7 @@ client.emailTemplates().get(EmailTemplateNameEnum.VERIFY_EMAIL);
 <dl>
 <dd>
 
-Update an email template.
+Retrieve device credential information (`public_key`, `refresh_token`, or `rotating_refresh_token`) associated with a specific user.
 </dd>
 </dl>
 </dd>
@@ -4922,11 +4825,17 @@ Update an email template.
 <dd>
 
 ```java
-client.emailTemplates().set(
-    EmailTemplateNameEnum.VERIFY_EMAIL,
-    SetEmailTemplateRequestContent
+client.deviceCredentials().list(
+    ListDeviceCredentialsRequestParameters
         .builder()
-        .template(EmailTemplateNameEnum.VERIFY_EMAIL)
+        .page(1)
+        .perPage(1)
+        .includeTotals(true)
+        .fields("fields")
+        .includeFields(true)
+        .userId("user_id")
+        .clientId("client_id")
+        .type(DeviceCredentialTypeEnum.PUBLIC_KEY)
         .build()
 );
 ```
@@ -4943,23 +4852,7 @@ client.emailTemplates().set(
 <dl>
 <dd>
 
-**templateName:** `EmailTemplateNameEnum` — Template name. Can be `verify_email`, `verify_email_by_code`, `auth_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, `async_approval`, `change_password` (legacy), or `password_reset` (legacy).
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**template:** `EmailTemplateNameEnum` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**body:** `Optional<String>` — Body of the email template.
+**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
     
 </dd>
 </dl>
@@ -4967,7 +4860,7 @@ client.emailTemplates().set(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Senders `from` email address.
+**perPage:** `Optional<Integer>` — Number of results per page.  There is a maximum of 1000 results allowed from this endpoint.
     
 </dd>
 </dl>
@@ -4975,7 +4868,7 @@ client.emailTemplates().set(
 <dl>
 <dd>
 
-**resultUrl:** `Optional<String>` — URL to redirect the user to after a successful action.
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
     
 </dd>
 </dl>
@@ -4983,7 +4876,7 @@ client.emailTemplates().set(
 <dl>
 <dd>
 
-**subject:** `Optional<String>` — Subject line of the email.
+**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
     
 </dd>
 </dl>
@@ -4991,7 +4884,7 @@ client.emailTemplates().set(
 <dl>
 <dd>
 
-**syntax:** `Optional<String>` — Syntax of the template body.
+**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
     
 </dd>
 </dl>
@@ -4999,7 +4892,7 @@ client.emailTemplates().set(
 <dl>
 <dd>
 
-**urlLifetimeInSeconds:** `Optional<Double>` — Lifetime in seconds that the link within the email will be valid for.
+**userId:** `Optional<String>` — user_id of the devices to retrieve.
     
 </dd>
 </dl>
@@ -5007,7 +4900,7 @@ client.emailTemplates().set(
 <dl>
 <dd>
 
-**includeEmailInRedirect:** `Optional<Boolean>` — Whether the `reset_email` and `verify_email` templates should include the user's email address as the `email` parameter in the returnUrl (true) or whether no email address should be included in the redirect (false). Defaults to true.
+**clientId:** `Optional<String>` — client_id of the devices to retrieve.
     
 </dd>
 </dl>
@@ -5015,7 +4908,7 @@ client.emailTemplates().set(
 <dl>
 <dd>
 
-**enabled:** `Optional<Boolean>` — Whether the template is enabled (true) or disabled (false).
+**type:** `Optional<DeviceCredentialTypeEnum>` — Type of credentials to retrieve. Must be `public_key`, `refresh_token` or `rotating_refresh_token`. The property will default to `refresh_token` when paging is requested
     
 </dd>
 </dl>
@@ -5027,7 +4920,7 @@ client.emailTemplates().set(
 </dl>
 </details>
 
-<details><summary><code>client.emailTemplates.update(templateName, request) -> UpdateEmailTemplateResponseContent</code></summary>
+<details><summary><code>client.deviceCredentials.createPublicKey(request) -> CreatePublicKeyDeviceCredentialResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -5039,7 +4932,9 @@ client.emailTemplates().set(
 <dl>
 <dd>
 
-Modify an email template.
+Create a device credential public key to manage refresh token rotation for a given `user_id`. Device Credentials APIs are designed for ad-hoc administrative use only and paging is by default enabled for GET requests.
+
+When refresh token rotation is enabled, the endpoint becomes consistent. For more information, read [Signing Keys](https://auth0.com/docs/get-started/tenant-settings/signing-keys).
 </dd>
 </dl>
 </dd>
@@ -5054,10 +4949,13 @@ Modify an email template.
 <dd>
 
 ```java
-client.emailTemplates().update(
-    EmailTemplateNameEnum.VERIFY_EMAIL,
-    UpdateEmailTemplateRequestContent
+client.deviceCredentials().createPublicKey(
+    CreatePublicKeyDeviceCredentialRequestContent
         .builder()
+        .deviceName("device_name")
+        .type(DeviceCredentialPublicKeyTypeEnum.PUBLIC_KEY)
+        .value("value")
+        .deviceId("device_id")
         .build()
 );
 ```
@@ -5074,7 +4972,7 @@ client.emailTemplates().update(
 <dl>
 <dd>
 
-**templateName:** `EmailTemplateNameEnum` — Template name. Can be `verify_email`, `verify_email_by_code`, `auth_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, `async_approval`, `change_password` (legacy), or `password_reset` (legacy).
+**deviceName:** `String` — Name for this device easily recognized by owner.
     
 </dd>
 </dl>
@@ -5082,7 +4980,7 @@ client.emailTemplates().update(
 <dl>
 <dd>
 
-**template:** `Optional<EmailTemplateNameEnum>` 
+**type:** `DeviceCredentialPublicKeyTypeEnum` 
     
 </dd>
 </dl>
@@ -5090,7 +4988,7 @@ client.emailTemplates().update(
 <dl>
 <dd>
 
-**body:** `Optional<String>` — Body of the email template.
+**value:** `String` — Base64 encoded string containing the credential.
     
 </dd>
 </dl>
@@ -5098,7 +4996,7 @@ client.emailTemplates().update(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Senders `from` email address.
+**deviceId:** `String` — Unique identifier for the device. Recommend using <a href="http://developer.android.com/reference/android/provider/Settings.Secure.html#ANDROID_ID">Android_ID</a> on Android and <a href="https://developer.apple.com/library/ios/documentation/UIKit/Reference/UIDevice_Class/index.html#//apple_ref/occ/instp/UIDevice/identifierForVendor">identifierForVendor</a>.
     
 </dd>
 </dl>
@@ -5106,79 +5004,46 @@ client.emailTemplates().update(
 <dl>
 <dd>
 
-**resultUrl:** `Optional<String>` — URL to redirect the user to after a successful action.
+**clientId:** `Optional<String>` — client_id of the client (application) this credential is for.
     
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**subject:** `Optional<String>` — Subject line of the email.
-    
 </dd>
 </dl>
 
-<dl>
-<dd>
 
-**syntax:** `Optional<String>` — Syntax of the template body.
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.deviceCredentials.delete(id)</code></summary>
 <dl>
 <dd>
 
-**urlLifetimeInSeconds:** `Optional<Double>` — Lifetime in seconds that the link within the email will be valid for.
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**includeEmailInRedirect:** `Optional<Boolean>` — Whether the `reset_email` and `verify_email` templates should include the user's email address as the `email` parameter in the returnUrl (true) or whether no email address should be included in the redirect (false). Defaults to true.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**enabled:** `Optional<Boolean>` — Whether the template is enabled (true) or disabled (false).
-    
+Permanently delete a device credential (such as a refresh token or public key) with the given ID.
 </dd>
 </dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
 
-</dd>
-</dl>
-</details>
-
-## EventStreams
-<details><summary><code>client.eventStreams.list() -> SyncPagingIterable&amp;lt;EventStreamResponseContent&amp;gt;</code></summary>
-<dl>
-<dd>
-
-#### 🔌 Usage
-
-<dl>
-<dd>
+<dl>
+<dd>
 
 <dl>
 <dd>
 
 ```java
-client.eventStreams().list(
-    ListEventStreamsRequestParameters
-        .builder()
-        .from("from")
-        .take(1)
-        .build()
-);
+client.deviceCredentials().delete("id");
 ```
 </dd>
 </dl>
@@ -5193,15 +5058,7 @@ client.eventStreams().list(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Optional Id from which to start selection.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+**id:** `String` — ID of the credential to delete.
     
 </dd>
 </dl>
@@ -5213,10 +5070,25 @@ client.eventStreams().list(
 </dl>
 </details>
 
-<details><summary><code>client.eventStreams.create(request) -> CreateEventStreamResponseContent</code></summary>
+## EmailTemplates
+<details><summary><code>client.emailTemplates.create(request) -> CreateEmailTemplateResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
 <dl>
 <dd>
 
+<dl>
+<dd>
+
+Create an email template.
+</dd>
+</dl>
+</dd>
+</dl>
+
 #### 🔌 Usage
 
 <dl>
@@ -5226,33 +5098,11 @@ client.eventStreams().list(
 <dd>
 
 ```java
-client.eventStreams().create(
-    EventStreamsCreateRequest.of(
-        CreateEventStreamWebHookRequestContent
-            .builder()
-            .destination(
-                EventStreamWebhookDestination
-                    .builder()
-                    .type(EventStreamWebhookDestinationTypeEnum.WEBHOOK)
-                    .configuration(
-                        EventStreamWebhookConfiguration
-                            .builder()
-                            .webhookEndpoint("webhook_endpoint")
-                            .webhookAuthorization(
-                                EventStreamWebhookAuthorizationResponse.of(
-                                    EventStreamWebhookBasicAuth
-                                        .builder()
-                                        .method(EventStreamWebhookBasicAuthMethodEnum.BASIC)
-                                        .username("username")
-                                        .build()
-                                )
-                            )
-                            .build()
-                    )
-                    .build()
-            )
-            .build()
-    )
+client.emailTemplates().create(
+    CreateEmailTemplateRequestContent
+        .builder()
+        .template(EmailTemplateNameEnum.VERIFY_EMAIL)
+        .build()
 );
 ```
 </dd>
@@ -5268,47 +5118,71 @@ client.eventStreams().create(
 <dl>
 <dd>
 
-**request:** `EventStreamsCreateRequest` 
+**template:** `EmailTemplateNameEnum` 
     
 </dd>
 </dl>
+
+<dl>
+<dd>
+
+**body:** `Optional<String>` — Body of the email template.
+    
 </dd>
 </dl>
 
+<dl>
+<dd>
 
+**from:** `Optional<String>` — Senders `from` email address.
+    
 </dd>
 </dl>
-</details>
 
-<details><summary><code>client.eventStreams.get(id) -> GetEventStreamResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 🔌 Usage
+**resultUrl:** `Optional<String>` — URL to redirect the user to after a successful action.
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**subject:** `Optional<String>` — Subject line of the email.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-```java
-client.eventStreams().get("id");
-```
+**syntax:** `Optional<String>` — Syntax of the template body.
+    
 </dd>
 </dl>
+
+<dl>
+<dd>
+
+**urlLifetimeInSeconds:** `Optional<Double>` — Lifetime in seconds that the link within the email will be valid for.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**includeEmailInRedirect:** `Optional<Boolean>` — Whether the `reset_email` and `verify_email` templates should include the user's email address as the `email` parameter in the returnUrl (true) or whether no email address should be included in the redirect (false). Defaults to true.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**id:** `String` — Unique identifier for the event stream.
+**enabled:** `Optional<Boolean>` — Whether the template is enabled (true) or disabled (false).
     
 </dd>
 </dl>
@@ -5320,10 +5194,24 @@ client.eventStreams().get("id");
 </dl>
 </details>
 
-<details><summary><code>client.eventStreams.delete(id)</code></summary>
+<details><summary><code>client.emailTemplates.get(templateName) -> GetEmailTemplateResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
 <dl>
 <dd>
 
+<dl>
+<dd>
+
+Retrieve an email template by pre-defined name. These names are `verify_email`, `verify_email_by_code`, `auth_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, and `async_approval`. The names `change_password`, and `password_reset` are also supported for legacy scenarios.
+</dd>
+</dl>
+</dd>
+</dl>
+
 #### 🔌 Usage
 
 <dl>
@@ -5333,7 +5221,7 @@ client.eventStreams().get("id");
 <dd>
 
 ```java
-client.eventStreams().delete("id");
+client.emailTemplates().get(EmailTemplateNameEnum.VERIFY_EMAIL);
 ```
 </dd>
 </dl>
@@ -5348,7 +5236,7 @@ client.eventStreams().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — Unique identifier for the event stream.
+**templateName:** `EmailTemplateNameEnum` — Template name. Can be `verify_email`, `verify_email_by_code`, `auth_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, `async_approval`, `change_password` (legacy), or `password_reset` (legacy).
     
 </dd>
 </dl>
@@ -5360,10 +5248,24 @@ client.eventStreams().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.eventStreams.update(id, request) -> UpdateEventStreamResponseContent</code></summary>
+<details><summary><code>client.emailTemplates.set(templateName, request) -> SetEmailTemplateResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
 <dl>
 <dd>
 
+<dl>
+<dd>
+
+Update an email template.
+</dd>
+</dl>
+</dd>
+</dl>
+
 #### 🔌 Usage
 
 <dl>
@@ -5373,10 +5275,11 @@ client.eventStreams().delete("id");
 <dd>
 
 ```java
-client.eventStreams().update(
-    "id",
-    UpdateEventStreamRequestContent
+client.emailTemplates().set(
+    EmailTemplateNameEnum.VERIFY_EMAIL,
+    SetEmailTemplateRequestContent
         .builder()
+        .template(EmailTemplateNameEnum.VERIFY_EMAIL)
         .build()
 );
 ```
@@ -5393,7 +5296,7 @@ client.eventStreams().update(
 <dl>
 <dd>
 
-**id:** `String` — Unique identifier for the event stream.
+**templateName:** `EmailTemplateNameEnum` — Template name. Can be `verify_email`, `verify_email_by_code`, `auth_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, `async_approval`, `change_password` (legacy), or `password_reset` (legacy).
     
 </dd>
 </dl>
@@ -5401,7 +5304,7 @@ client.eventStreams().update(
 <dl>
 <dd>
 
-**name:** `Optional<String>` — Name of the event stream.
+**template:** `EmailTemplateNameEnum` 
     
 </dd>
 </dl>
@@ -5409,7 +5312,7 @@ client.eventStreams().update(
 <dl>
 <dd>
 
-**subscriptions:** `Optional<List<EventStreamSubscription>>` — List of event types subscribed to in this stream.
+**body:** `Optional<String>` — Body of the email template.
     
 </dd>
 </dl>
@@ -5417,7 +5320,7 @@ client.eventStreams().update(
 <dl>
 <dd>
 
-**destination:** `Optional<EventStreamDestinationPatch>` 
+**from:** `Optional<String>` — Senders `from` email address.
     
 </dd>
 </dl>
@@ -5425,53 +5328,31 @@ client.eventStreams().update(
 <dl>
 <dd>
 
-**status:** `Optional<EventStreamStatusEnum>` 
+**resultUrl:** `Optional<String>` — URL to redirect the user to after a successful action.
     
 </dd>
 </dl>
-</dd>
-</dl>
 
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.eventStreams.test(id, request) -> CreateEventStreamTestEventResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 🔌 Usage
-
-<dl>
-<dd>
+**subject:** `Optional<String>` — Subject line of the email.
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
-```java
-client.eventStreams().test(
-    "id",
-    CreateEventStreamTestEventRequestContent
-        .builder()
-        .eventType(EventStreamTestEventTypeEnum.CONNECTION_CREATED)
-        .build()
-);
-```
-</dd>
-</dl>
+**syntax:** `Optional<String>` — Syntax of the template body.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-**id:** `String` — Unique identifier for the event stream.
+**urlLifetimeInSeconds:** `Optional<Double>` — Lifetime in seconds that the link within the email will be valid for.
     
 </dd>
 </dl>
@@ -5479,7 +5360,7 @@ client.eventStreams().test(
 <dl>
 <dd>
 
-**eventType:** `EventStreamTestEventTypeEnum` 
+**includeEmailInRedirect:** `Optional<Boolean>` — Whether the `reset_email` and `verify_email` templates should include the user's email address as the `email` parameter in the returnUrl (true) or whether no email address should be included in the redirect (false). Defaults to true.
     
 </dd>
 </dl>
@@ -5487,7 +5368,7 @@ client.eventStreams().test(
 <dl>
 <dd>
 
-**data:** `Optional<Map<String, Object>>` 
+**enabled:** `Optional<Boolean>` — Whether the template is enabled (true) or disabled (false).
     
 </dd>
 </dl>
@@ -5499,8 +5380,7 @@ client.eventStreams().test(
 </dl>
 </details>
 
-## Events
-<details><summary><code>client.events.subscribe() -> Iterable&amp;lt;EventStreamSubscribeEventsResponseContent&amp;gt;</code></summary>
+<details><summary><code>client.emailTemplates.update(templateName, request) -> UpdateEmailTemplateResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -5512,7 +5392,7 @@ client.eventStreams().test(
 <dl>
 <dd>
 
-Subscribe to events via Server-Sent Events (SSE)
+Modify an email template.
 </dd>
 </dl>
 </dd>
@@ -5527,14 +5407,10 @@ Subscribe to events via Server-Sent Events (SSE)
 <dd>
 
 ```java
-client.events().subscribe(
-    SubscribeEventsRequestParameters
+client.emailTemplates().update(
+    EmailTemplateNameEnum.VERIFY_EMAIL,
+    UpdateEmailTemplateRequestContent
         .builder()
-        .from("from")
-        .fromTimestamp("from_timestamp")
-        .eventType(
-            Arrays.asList(EventStreamSubscribeEventsEventTypeEnum.CONNECTION_CREATED)
-        )
         .build()
 );
 ```
@@ -5551,7 +5427,7 @@ client.events().subscribe(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Opaque token representing position in the stream. If not provided, stream will start from the latest events.
+**templateName:** `EmailTemplateNameEnum` — Template name. Can be `verify_email`, `verify_email_by_code`, `auth_email_by_code`, `reset_email`, `reset_email_by_code`, `welcome_email`, `blocked_account`, `stolen_credentials`, `enrollment_email`, `mfa_oob_code`, `user_invitation`, `async_approval`, `change_password` (legacy), or `password_reset` (legacy).
     
 </dd>
 </dl>
@@ -5559,7 +5435,7 @@ client.events().subscribe(
 <dl>
 <dd>
 
-**fromTimestamp:** `Optional<String>` — RFC-3339 timestamp indicating where to start streaming events from. This should only be used on the initial query when a cursor may not be available. Subsequent requests should use the cursor (from) as it will be more accurate.
+**template:** `Optional<EmailTemplateNameEnum>` 
     
 </dd>
 </dl>
@@ -5567,67 +5443,39 @@ client.events().subscribe(
 <dl>
 <dd>
 
-**eventType:** `Optional<EventStreamSubscribeEventsEventTypeEnum>` — Event type(s) to listen for. Specify multiple times for multiple types (e.g., ?event_type=user.created&event_type=user.updated). If not provided, all event types will be streamed.
+**body:** `Optional<String>` — Body of the email template.
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
+**from:** `Optional<String>` — Senders `from` email address.
+    
 </dd>
 </dl>
-</details>
 
-## Flows
-<details><summary><code>client.flows.list() -> SyncPagingIterable&amp;lt;FlowSummary&amp;gt;</code></summary>
 <dl>
 <dd>
 
-#### 🔌 Usage
+**resultUrl:** `Optional<String>` — URL to redirect the user to after a successful action.
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**subject:** `Optional<String>` — Subject line of the email.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-```java
-client.flows().list(
-    ListFlowsRequestParameters
-        .builder()
-        .page(1)
-        .perPage(1)
-        .includeTotals(true)
-        .synchronous(true)
-        .hydrate(
-            Arrays.asList(ListFlowsRequestParametersHydrateEnum.FORM_COUNT)
-        )
-        .build()
-);
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**perPage:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+**syntax:** `Optional<String>` — Syntax of the template body.
     
 </dd>
 </dl>
@@ -5635,7 +5483,7 @@ client.flows().list(
 <dl>
 <dd>
 
-**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+**urlLifetimeInSeconds:** `Optional<Double>` — Lifetime in seconds that the link within the email will be valid for.
     
 </dd>
 </dl>
@@ -5643,7 +5491,7 @@ client.flows().list(
 <dl>
 <dd>
 
-**hydrate:** `Optional<ListFlowsRequestParametersHydrateEnum>` — hydration param
+**includeEmailInRedirect:** `Optional<Boolean>` — Whether the `reset_email` and `verify_email` templates should include the user's email address as the `email` parameter in the returnUrl (true) or whether no email address should be included in the redirect (false). Defaults to true.
     
 </dd>
 </dl>
@@ -5651,7 +5499,7 @@ client.flows().list(
 <dl>
 <dd>
 
-**synchronous:** `Optional<Boolean>` — flag to filter by sync/async flows
+**enabled:** `Optional<Boolean>` — Whether the template is enabled (true) or disabled (false).
     
 </dd>
 </dl>
@@ -5663,7 +5511,8 @@ client.flows().list(
 </dl>
 </details>
 
-<details><summary><code>client.flows.create(request) -> CreateFlowResponseContent</code></summary>
+## EventStreams
+<details><summary><code>client.eventStreams.list() -> SyncPagingIterable&amp;lt;EventStreamResponseContent&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -5676,10 +5525,11 @@ client.flows().list(
 <dd>
 
 ```java
-client.flows().create(
-    CreateFlowRequestContent
+client.eventStreams().list(
+    ListEventStreamsRequestParameters
         .builder()
-        .name("name")
+        .from("from")
+        .take(1)
         .build()
 );
 ```
@@ -5696,7 +5546,7 @@ client.flows().create(
 <dl>
 <dd>
 
-**name:** `String` 
+**from:** `Optional<String>` — Optional Id from which to start selection.
     
 </dd>
 </dl>
@@ -5704,7 +5554,7 @@ client.flows().create(
 <dl>
 <dd>
 
-**actions:** `Optional<List<FlowAction>>` 
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
     
 </dd>
 </dl>
@@ -5716,7 +5566,7 @@ client.flows().create(
 </dl>
 </details>
 
-<details><summary><code>client.flows.get(id) -> GetFlowResponseContent</code></summary>
+<details><summary><code>client.eventStreams.create(request) -> CreateEventStreamResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -5729,14 +5579,33 @@ client.flows().create(
 <dd>
 
 ```java
-client.flows().get(
-    "id",
-    GetFlowRequestParameters
-        .builder()
-        .hydrate(
-            Arrays.asList(GetFlowRequestParametersHydrateEnum.FORM_COUNT)
-        )
-        .build()
+client.eventStreams().create(
+    EventStreamsCreateRequest.of(
+        CreateEventStreamWebHookRequestContent
+            .builder()
+            .destination(
+                EventStreamWebhookDestination
+                    .builder()
+                    .type(EventStreamWebhookDestinationTypeEnum.WEBHOOK)
+                    .configuration(
+                        EventStreamWebhookConfiguration
+                            .builder()
+                            .webhookEndpoint("webhook_endpoint")
+                            .webhookAuthorization(
+                                EventStreamWebhookAuthorizationResponse.of(
+                                    EventStreamWebhookBasicAuth
+                                        .builder()
+                                        .method(EventStreamWebhookBasicAuthMethodEnum.BASIC)
+                                        .username("username")
+                                        .build()
+                                )
+                            )
+                            .build()
+                    )
+                    .build()
+            )
+            .build()
+    )
 );
 ```
 </dd>
@@ -5752,15 +5621,7 @@ client.flows().get(
 <dl>
 <dd>
 
-**id:** `String` — Flow identifier
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**hydrate:** `Optional<GetFlowRequestParametersHydrateEnum>` — hydration param
+**request:** `EventStreamsCreateRequest` 
     
 </dd>
 </dl>
@@ -5772,7 +5633,7 @@ client.flows().get(
 </dl>
 </details>
 
-<details><summary><code>client.flows.delete(id)</code></summary>
+<details><summary><code>client.eventStreams.get(id) -> GetEventStreamResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -5785,7 +5646,7 @@ client.flows().get(
 <dd>
 
 ```java
-client.flows().delete("id");
+client.eventStreams().get("id");
 ```
 </dd>
 </dl>
@@ -5800,7 +5661,7 @@ client.flows().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — Flow id
+**id:** `String` — Unique identifier for the event stream.
     
 </dd>
 </dl>
@@ -5812,7 +5673,7 @@ client.flows().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.flows.update(id, request) -> UpdateFlowResponseContent</code></summary>
+<details><summary><code>client.eventStreams.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -5825,12 +5686,7 @@ client.flows().delete("id");
 <dd>
 
 ```java
-client.flows().update(
-    "id",
-    UpdateFlowRequestContent
-        .builder()
-        .build()
-);
+client.eventStreams().delete("id");
 ```
 </dd>
 </dl>
@@ -5845,23 +5701,7 @@ client.flows().update(
 <dl>
 <dd>
 
-**id:** `String` — Flow identifier
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**name:** `Optional<String>` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**actions:** `Optional<List<FlowAction>>` 
+**id:** `String` — Unique identifier for the event stream.
     
 </dd>
 </dl>
@@ -5873,8 +5713,7 @@ client.flows().update(
 </dl>
 </details>
 
-## Forms
-<details><summary><code>client.forms.list() -> SyncPagingIterable&amp;lt;FormSummary&amp;gt;</code></summary>
+<details><summary><code>client.eventStreams.update(id, request) -> UpdateEventStreamResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -5887,15 +5726,10 @@ client.flows().update(
 <dd>
 
 ```java
-client.forms().list(
-    ListFormsRequestParameters
+client.eventStreams().update(
+    "id",
+    UpdateEventStreamRequestContent
         .builder()
-        .page(1)
-        .perPage(1)
-        .includeTotals(true)
-        .hydrate(
-            Arrays.asList(FormsRequestParametersHydrateEnum.FLOW_COUNT)
-        )
         .build()
 );
 ```
@@ -5912,7 +5746,7 @@ client.forms().list(
 <dl>
 <dd>
 
-**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
+**id:** `String` — Unique identifier for the event stream.
     
 </dd>
 </dl>
@@ -5920,7 +5754,7 @@ client.forms().list(
 <dl>
 <dd>
 
-**perPage:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+**name:** `Optional<String>` — Name of the event stream.
     
 </dd>
 </dl>
@@ -5928,7 +5762,7 @@ client.forms().list(
 <dl>
 <dd>
 
-**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+**subscriptions:** `Optional<List<EventStreamSubscription>>` — List of event types subscribed to in this stream.
     
 </dd>
 </dl>
@@ -5936,7 +5770,15 @@ client.forms().list(
 <dl>
 <dd>
 
-**hydrate:** `Optional<FormsRequestParametersHydrateEnum>` — Query parameter to hydrate the response with additional data
+**destination:** `Optional<EventStreamDestinationPatch>` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**status:** `Optional<EventStreamStatusEnum>` 
     
 </dd>
 </dl>
@@ -5948,7 +5790,7 @@ client.forms().list(
 </dl>
 </details>
 
-<details><summary><code>client.forms.create(request) -> CreateFormResponseContent</code></summary>
+<details><summary><code>client.eventStreams.test(id, request) -> CreateEventStreamTestEventResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -5961,10 +5803,11 @@ client.forms().list(
 <dd>
 
 ```java
-client.forms().create(
-    CreateFormRequestContent
+client.eventStreams().test(
+    "id",
+    CreateEventStreamTestEventRequestContent
         .builder()
-        .name("name")
+        .eventType(EventStreamTestEventTypeEnum.CONNECTION_CREATED)
         .build()
 );
 ```
@@ -5981,7 +5824,7 @@ client.forms().create(
 <dl>
 <dd>
 
-**name:** `String` 
+**id:** `String` — Unique identifier for the event stream.
     
 </dd>
 </dl>
@@ -5989,7 +5832,7 @@ client.forms().create(
 <dl>
 <dd>
 
-**messages:** `Optional<FormMessages>` 
+**eventType:** `EventStreamTestEventTypeEnum` 
     
 </dd>
 </dl>
@@ -5997,61 +5840,36 @@ client.forms().create(
 <dl>
 <dd>
 
-**languages:** `Optional<FormLanguages>` 
+**data:** `Optional<Map<String, Object>>` 
     
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**translations:** `Optional<Map<String, Map<String, Object>>>` 
-    
 </dd>
 </dl>
 
-<dl>
-<dd>
 
-**nodes:** `Optional<List<FormNode>>` 
-    
 </dd>
 </dl>
+</details>
 
+## Events
+<details><summary><code>client.events.subscribe() -> Iterable&amp;lt;EventStreamSubscribeEventsResponseContent&amp;gt;</code></summary>
 <dl>
 <dd>
 
-**start:** `Optional<FormStartNode>` 
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**ending:** `Optional<FormEndingNode>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**style:** `Optional<FormStyle>` 
-    
-</dd>
-</dl>
+Subscribe to events via Server-Sent Events (SSE)
 </dd>
 </dl>
-
-
 </dd>
 </dl>
-</details>
-
-<details><summary><code>client.forms.get(id) -> GetFormResponseContent</code></summary>
-<dl>
-<dd>
 
 #### 🔌 Usage
 
@@ -6062,12 +5880,13 @@ client.forms().create(
 <dd>
 
 ```java
-client.forms().get(
-    "id",
-    GetFormRequestParameters
+client.events().subscribe(
+    SubscribeEventsRequestParameters
         .builder()
-        .hydrate(
-            Arrays.asList(FormsRequestParametersHydrateEnum.FLOW_COUNT)
+        .from("from")
+        .fromTimestamp("from_timestamp")
+        .eventType(
+            Arrays.asList(EventStreamSubscribeEventsEventTypeEnum.CONNECTION_CREATED)
         )
         .build()
 );
@@ -6085,7 +5904,7 @@ client.forms().get(
 <dl>
 <dd>
 
-**id:** `String` — The ID of the form to retrieve.
+**from:** `Optional<String>` — Opaque token representing position in the stream. If not provided, stream will start from the latest events.
     
 </dd>
 </dl>
@@ -6093,7 +5912,15 @@ client.forms().get(
 <dl>
 <dd>
 
-**hydrate:** `Optional<FormsRequestParametersHydrateEnum>` — Query parameter to hydrate the response with additional data
+**fromTimestamp:** `Optional<String>` — RFC-3339 timestamp indicating where to start streaming events from. This should only be used on the initial query when a cursor may not be available. Subsequent requests should use the cursor (from) as it will be more accurate.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**eventType:** `Optional<EventStreamSubscribeEventsEventTypeEnum>` — Event type(s) to listen for. Specify multiple times for multiple types (e.g., ?event_type=user.created&event_type=user.updated). If not provided, all event types will be streamed.
     
 </dd>
 </dl>
@@ -6105,7 +5932,8 @@ client.forms().get(
 </dl>
 </details>
 
-<details><summary><code>client.forms.delete(id)</code></summary>
+## Flows
+<details><summary><code>client.flows.list() -> SyncPagingIterable&amp;lt;FlowSummary&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -6118,7 +5946,18 @@ client.forms().get(
 <dd>
 
 ```java
-client.forms().delete("id");
+client.flows().list(
+    ListFlowsRequestParameters
+        .builder()
+        .page(1)
+        .perPage(1)
+        .includeTotals(true)
+        .synchronous(true)
+        .hydrate(
+            Arrays.asList(ListFlowsRequestParametersHydrateEnum.FORM_COUNT)
+        )
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -6133,52 +5972,23 @@ client.forms().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — The ID of the form to delete.
+**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
     
 </dd>
 </dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.forms.update(id, request) -> UpdateFormResponseContent</code></summary>
-<dl>
-<dd>
-
-#### 🔌 Usage
-
-<dl>
-<dd>
 
 <dl>
 <dd>
 
-```java
-client.forms().update(
-    "id",
-    UpdateFormRequestContent
-        .builder()
-        .build()
-);
-```
-</dd>
-</dl>
+**perPage:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-**id:** `String` — The ID of the form to update.
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
     
 </dd>
 </dl>
@@ -6186,7 +5996,7 @@ client.forms().update(
 <dl>
 <dd>
 
-**name:** `Optional<String>` 
+**hydrate:** `Optional<ListFlowsRequestParametersHydrateEnum>` — hydration param
     
 </dd>
 </dl>
@@ -6194,47 +6004,52 @@ client.forms().update(
 <dl>
 <dd>
 
-**messages:** `Optional<FormMessages>` 
+**synchronous:** `Optional<Boolean>` — flag to filter by sync/async flows
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**languages:** `Optional<FormLanguages>` 
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.flows.create(request) -> CreateFlowResponseContent</code></summary>
 <dl>
 <dd>
 
-**translations:** `Optional<Map<String, Map<String, Object>>>` 
-    
-</dd>
-</dl>
+#### 🔌 Usage
 
 <dl>
 <dd>
 
-**nodes:** `Optional<List<FormNode>>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**start:** `Optional<FormStartNode>` 
-    
+```java
+client.flows().create(
+    CreateFlowRequestContent
+        .builder()
+        .name("name")
+        .build()
+);
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**ending:** `Optional<FormEndingNode>` 
+<dl>
+<dd>
+
+**name:** `String` 
     
 </dd>
 </dl>
@@ -6242,7 +6057,7 @@ client.forms().update(
 <dl>
 <dd>
 
-**style:** `Optional<FormStyle>` 
+**actions:** `Optional<List<FlowAction>>` 
     
 </dd>
 </dl>
@@ -6254,25 +6069,10 @@ client.forms().update(
 </dl>
 </details>
 
-## UserGrants
-<details><summary><code>client.userGrants.list() -> SyncPagingIterable&amp;lt;UserGrant&amp;gt;</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
+<details><summary><code>client.flows.get(id) -> GetFlowResponseContent</code></summary>
 <dl>
 <dd>
 
-Retrieve the [grants](https://auth0.com/docs/api-auth/which-oauth-flow-to-use) associated with your account.
-</dd>
-</dl>
-</dd>
-</dl>
-
 #### 🔌 Usage
 
 <dl>
@@ -6282,15 +6082,13 @@ Retrieve the [grants](https://auth0.com/docs/api-auth/which-oauth-flow-to-use) a
 <dd>
 
 ```java
-client.userGrants().list(
-    ListUserGrantsRequestParameters
+client.flows().get(
+    "id",
+    GetFlowRequestParameters
         .builder()
-        .perPage(1)
-        .page(1)
-        .includeTotals(true)
-        .userId("user_id")
-        .clientId("client_id")
-        .audience("audience")
+        .hydrate(
+            Arrays.asList(GetFlowRequestParametersHydrateEnum.FORM_COUNT)
+        )
         .build()
 );
 ```
@@ -6307,7 +6105,7 @@ client.userGrants().list(
 <dl>
 <dd>
 
-**perPage:** `Optional<Integer>` — Number of results per page.
+**id:** `String` — Flow identifier
     
 </dd>
 </dl>
@@ -6315,39 +6113,47 @@ client.userGrants().list(
 <dl>
 <dd>
 
-**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
+**hydrate:** `Optional<GetFlowRequestParametersHydrateEnum>` — hydration param
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.flows.delete(id)</code></summary>
 <dl>
 <dd>
 
-**userId:** `Optional<String>` — user_id of the grants to retrieve.
-    
-</dd>
-</dl>
+#### 🔌 Usage
 
 <dl>
 <dd>
 
-**clientId:** `Optional<String>` — client_id of the grants to retrieve.
-    
+<dl>
+<dd>
+
+```java
+client.flows().delete("id");
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**audience:** `Optional<String>` — audience of the grants to retrieve.
+<dl>
+<dd>
+
+**id:** `String` — Flow id
     
 </dd>
 </dl>
@@ -6359,11 +6165,11 @@ client.userGrants().list(
 </dl>
 </details>
 
-<details><summary><code>client.userGrants.deleteByUserId()</code></summary>
+<details><summary><code>client.flows.update(id, request) -> UpdateFlowResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -6371,13 +6177,20 @@ client.userGrants().list(
 <dl>
 <dd>
 
-Delete a grant associated with your account.
+```java
+client.flows().update(
+    "id",
+    UpdateFlowRequestContent
+        .builder()
+        .build()
+);
+```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -6385,28 +6198,23 @@ Delete a grant associated with your account.
 <dl>
 <dd>
 
-```java
-client.userGrants().deleteByUserId(
-    DeleteUserGrantByUserIdRequestParameters
-        .builder()
-        .userId("user_id")
-        .build()
-);
-```
-</dd>
-</dl>
+**id:** `String` — Flow identifier
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**name:** `Optional<String>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**userId:** `String` — user_id of the grant to delete.
+**actions:** `Optional<List<FlowAction>>` 
     
 </dd>
 </dl>
@@ -6418,11 +6226,12 @@ client.userGrants().deleteByUserId(
 </dl>
 </details>
 
-<details><summary><code>client.userGrants.delete(id)</code></summary>
+## Forms
+<details><summary><code>client.forms.list() -> SyncPagingIterable&amp;lt;FormSummary&amp;gt;</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -6430,13 +6239,25 @@ client.userGrants().deleteByUserId(
 <dl>
 <dd>
 
-Delete a grant associated with your account.
+```java
+client.forms().list(
+    ListFormsRequestParameters
+        .builder()
+        .page(1)
+        .perPage(1)
+        .includeTotals(true)
+        .hydrate(
+            Arrays.asList(FormsRequestParametersHydrateEnum.FLOW_COUNT)
+        )
+        .build()
+);
+```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -6444,23 +6265,31 @@ Delete a grant associated with your account.
 <dl>
 <dd>
 
-```java
-client.userGrants().delete("id");
-```
+**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
+    
 </dd>
 </dl>
+
+<dl>
+<dd>
+
+**perPage:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**id:** `String` — ID of the grant to delete.
+**hydrate:** `Optional<FormsRequestParametersHydrateEnum>` — Query parameter to hydrate the response with additional data
     
 </dd>
 </dl>
@@ -6472,25 +6301,10 @@ client.userGrants().delete("id");
 </dl>
 </details>
 
-## Groups
-<details><summary><code>client.groups.list() -> SyncPagingIterable&amp;lt;Group&amp;gt;</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
+<details><summary><code>client.forms.create(request) -> CreateFormResponseContent</code></summary>
 <dl>
 <dd>
 
-List all groups in your tenant.
-</dd>
-</dl>
-</dd>
-</dl>
-
 #### 🔌 Usage
 
 <dl>
@@ -6500,17 +6314,10 @@ List all groups in your tenant.
 <dd>
 
 ```java
-client.groups().list(
-    ListGroupsRequestParameters
+client.forms().create(
+    CreateFormRequestContent
         .builder()
-        .connectionId("connection_id")
         .name("name")
-        .externalId("external_id")
-        .search("search")
-        .fields("fields")
-        .includeFields(true)
-        .from("from")
-        .take(1)
         .build()
 );
 ```
@@ -6527,7 +6334,7 @@ client.groups().list(
 <dl>
 <dd>
 
-**connectionId:** `Optional<String>` — Filter groups by connection ID.
+**name:** `String` 
     
 </dd>
 </dl>
@@ -6535,7 +6342,7 @@ client.groups().list(
 <dl>
 <dd>
 
-**name:** `Optional<String>` — Filter groups by name.
+**messages:** `Optional<FormMessages>` 
     
 </dd>
 </dl>
@@ -6543,7 +6350,7 @@ client.groups().list(
 <dl>
 <dd>
 
-**externalId:** `Optional<String>` — Filter groups by external ID.
+**languages:** `Optional<FormLanguages>` 
     
 </dd>
 </dl>
@@ -6551,7 +6358,7 @@ client.groups().list(
 <dl>
 <dd>
 
-**search:** `Optional<String>` — Search for groups by name or external ID.
+**translations:** `Optional<Map<String, Map<String, Object>>>` 
     
 </dd>
 </dl>
@@ -6559,7 +6366,7 @@ client.groups().list(
 <dl>
 <dd>
 
-**fields:** `Optional<String>` — A comma separated list of fields to include or exclude (depending on include_fields) from the result, empty to retrieve all fields
+**nodes:** `Optional<List<FormNode>>` 
     
 </dd>
 </dl>
@@ -6567,7 +6374,7 @@ client.groups().list(
 <dl>
 <dd>
 
-**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
+**start:** `Optional<FormStartNode>` 
     
 </dd>
 </dl>
@@ -6575,7 +6382,7 @@ client.groups().list(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Optional Id from which to start selection.
+**ending:** `Optional<FormEndingNode>` 
     
 </dd>
 </dl>
@@ -6583,7 +6390,7 @@ client.groups().list(
 <dl>
 <dd>
 
-**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+**style:** `Optional<FormStyle>` 
     
 </dd>
 </dl>
@@ -6595,11 +6402,11 @@ client.groups().list(
 </dl>
 </details>
 
-<details><summary><code>client.groups.get(id) -> GetGroupResponseContent</code></summary>
+<details><summary><code>client.forms.get(id) -> GetFormResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -6607,13 +6414,23 @@ client.groups().list(
 <dl>
 <dd>
 
-Retrieve a group by its ID.
+```java
+client.forms().get(
+    "id",
+    GetFormRequestParameters
+        .builder()
+        .hydrate(
+            Arrays.asList(FormsRequestParametersHydrateEnum.FLOW_COUNT)
+        )
+        .build()
+);
+```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -6621,23 +6438,15 @@ Retrieve a group by its ID.
 <dl>
 <dd>
 
-```java
-client.groups().get("id");
-```
-</dd>
-</dl>
+**id:** `String` — The ID of the form to retrieve.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-**id:** `String` — Unique identifier for the group (service-generated).
+**hydrate:** `Optional<FormsRequestParametersHydrateEnum>` — Query parameter to hydrate the response with additional data
     
 </dd>
 </dl>
@@ -6649,24 +6458,10 @@ client.groups().get("id");
 </dl>
 </details>
 
-<details><summary><code>client.groups.delete(id)</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
+<details><summary><code>client.forms.delete(id)</code></summary>
 <dl>
 <dd>
 
-Delete a group by its ID.
-</dd>
-</dl>
-</dd>
-</dl>
-
 #### 🔌 Usage
 
 <dl>
@@ -6676,7 +6471,7 @@ Delete a group by its ID.
 <dd>
 
 ```java
-client.groups().delete("id");
+client.forms().delete("id");
 ```
 </dd>
 </dl>
@@ -6691,7 +6486,7 @@ client.groups().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — Unique identifier for the group (service-generated).
+**id:** `String` — The ID of the form to delete.
     
 </dd>
 </dl>
@@ -6703,12 +6498,11 @@ client.groups().delete("id");
 </dl>
 </details>
 
-## Hooks
-<details><summary><code>client.hooks.list() -> SyncPagingIterable&amp;lt;Hook&amp;gt;</code></summary>
+<details><summary><code>client.forms.update(id, request) -> UpdateFormResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -6716,13 +6510,20 @@ client.groups().delete("id");
 <dl>
 <dd>
 
-Retrieve all [hooks](https://auth0.com/docs/hooks). Accepts a list of fields to include or exclude in the result.
+```java
+client.forms().update(
+    "id",
+    UpdateFormRequestContent
+        .builder()
+        .build()
+);
+```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -6730,33 +6531,31 @@ Retrieve all [hooks](https://auth0.com/docs/hooks). Accepts a list of fields to
 <dl>
 <dd>
 
-```java
-client.hooks().list(
-    ListHooksRequestParameters
-        .builder()
-        .page(1)
-        .perPage(1)
-        .includeTotals(true)
-        .enabled(true)
-        .fields("fields")
-        .triggerId(HookTriggerIdEnum.CREDENTIALS_EXCHANGE)
-        .build()
-);
-```
+**id:** `String` — The ID of the form to update.
+    
 </dd>
 </dl>
+
+<dl>
+<dd>
+
+**name:** `Optional<String>` 
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**messages:** `Optional<FormMessages>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
+**languages:** `Optional<FormLanguages>` 
     
 </dd>
 </dl>
@@ -6764,7 +6563,7 @@ client.hooks().list(
 <dl>
 <dd>
 
-**perPage:** `Optional<Integer>` — Number of results per page.
+**translations:** `Optional<Map<String, Map<String, Object>>>` 
     
 </dd>
 </dl>
@@ -6772,7 +6571,7 @@ client.hooks().list(
 <dl>
 <dd>
 
-**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+**nodes:** `Optional<List<FormNode>>` 
     
 </dd>
 </dl>
@@ -6780,7 +6579,7 @@ client.hooks().list(
 <dl>
 <dd>
 
-**enabled:** `Optional<Boolean>` — Optional filter on whether a hook is enabled (true) or disabled (false).
+**start:** `Optional<FormStartNode>` 
     
 </dd>
 </dl>
@@ -6788,7 +6587,7 @@ client.hooks().list(
 <dl>
 <dd>
 
-**fields:** `Optional<String>` — Comma-separated list of fields to include in the result. Leave empty to retrieve all fields.
+**ending:** `Optional<FormEndingNode>` 
     
 </dd>
 </dl>
@@ -6796,7 +6595,7 @@ client.hooks().list(
 <dl>
 <dd>
 
-**triggerId:** `Optional<HookTriggerIdEnum>` — Retrieves hooks that match the trigger
+**style:** `Optional<FormStyle>` 
     
 </dd>
 </dl>
@@ -6808,7 +6607,8 @@ client.hooks().list(
 </dl>
 </details>
 
-<details><summary><code>client.hooks.create(request) -> CreateHookResponseContent</code></summary>
+## UserGrants
+<details><summary><code>client.userGrants.list() -> SyncPagingIterable&amp;lt;UserGrant&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -6820,7 +6620,7 @@ client.hooks().list(
 <dl>
 <dd>
 
-Create a new hook.
+Retrieve the [grants](https://auth0.com/docs/api-auth/which-oauth-flow-to-use) associated with your account.
 </dd>
 </dl>
 </dd>
@@ -6835,12 +6635,15 @@ Create a new hook.
 <dd>
 
 ```java
-client.hooks().create(
-    CreateHookRequestContent
+client.userGrants().list(
+    ListUserGrantsRequestParameters
         .builder()
-        .name("name")
-        .script("script")
-        .triggerId(HookTriggerIdEnum.CREDENTIALS_EXCHANGE)
+        .perPage(1)
+        .page(1)
+        .includeTotals(true)
+        .userId("user_id")
+        .clientId("client_id")
+        .audience("audience")
         .build()
 );
 ```
@@ -6857,7 +6660,7 @@ client.hooks().create(
 <dl>
 <dd>
 
-**name:** `String` — Name of this hook.
+**perPage:** `Optional<Integer>` — Number of results per page.
     
 </dd>
 </dl>
@@ -6865,7 +6668,7 @@ client.hooks().create(
 <dl>
 <dd>
 
-**script:** `String` — Code to be executed when this hook runs.
+**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
     
 </dd>
 </dl>
@@ -6873,7 +6676,7 @@ client.hooks().create(
 <dl>
 <dd>
 
-**enabled:** `Optional<Boolean>` — Whether this hook will be executed (true) or ignored (false).
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
     
 </dd>
 </dl>
@@ -6881,7 +6684,7 @@ client.hooks().create(
 <dl>
 <dd>
 
-**dependencies:** `Optional<Map<String, String>>` 
+**userId:** `Optional<String>` — user_id of the grants to retrieve.
     
 </dd>
 </dl>
@@ -6889,7 +6692,15 @@ client.hooks().create(
 <dl>
 <dd>
 
-**triggerId:** `HookTriggerIdEnum` — Execution stage of this rule. Can be `credentials-exchange`, `pre-user-registration`, `post-user-registration`, `post-change-password`, or `send-phone-message`.
+**clientId:** `Optional<String>` — client_id of the grants to retrieve.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**audience:** `Optional<String>` — audience of the grants to retrieve.
     
 </dd>
 </dl>
@@ -6901,7 +6712,7 @@ client.hooks().create(
 </dl>
 </details>
 
-<details><summary><code>client.hooks.get(id) -> GetHookResponseContent</code></summary>
+<details><summary><code>client.userGrants.deleteByUserId()</code></summary>
 <dl>
 <dd>
 
@@ -6913,7 +6724,7 @@ client.hooks().create(
 <dl>
 <dd>
 
-Retrieve [a hook](https://auth0.com/docs/hooks) by its ID. Accepts a list of fields to include in the result.
+Delete a grant associated with your account.
 </dd>
 </dl>
 </dd>
@@ -6928,11 +6739,10 @@ Retrieve [a hook](https://auth0.com/docs/hooks) by its ID. Accepts a list of fie
 <dd>
 
 ```java
-client.hooks().get(
-    "id",
-    GetHookRequestParameters
+client.userGrants().deleteByUserId(
+    DeleteUserGrantByUserIdRequestParameters
         .builder()
-        .fields("fields")
+        .userId("user_id")
         .build()
 );
 ```
@@ -6949,15 +6759,7 @@ client.hooks().get(
 <dl>
 <dd>
 
-**id:** `String` — ID of the hook to retrieve.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**fields:** `Optional<String>` — Comma-separated list of fields to include in the result. Leave empty to retrieve all fields.
+**userId:** `String` — user_id of the grant to delete.
     
 </dd>
 </dl>
@@ -6969,7 +6771,7 @@ client.hooks().get(
 </dl>
 </details>
 
-<details><summary><code>client.hooks.delete(id)</code></summary>
+<details><summary><code>client.userGrants.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -6981,7 +6783,7 @@ client.hooks().get(
 <dl>
 <dd>
 
-Delete a hook.
+Delete a grant associated with your account.
 </dd>
 </dl>
 </dd>
@@ -6996,7 +6798,7 @@ Delete a hook.
 <dd>
 
 ```java
-client.hooks().delete("id");
+client.userGrants().delete("id");
 ```
 </dd>
 </dl>
@@ -7011,7 +6813,7 @@ client.hooks().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the hook to delete.
+**id:** `String` — ID of the grant to delete.
     
 </dd>
 </dl>
@@ -7023,7 +6825,8 @@ client.hooks().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.hooks.update(id, request) -> UpdateHookResponseContent</code></summary>
+## Groups
+<details><summary><code>client.groups.list() -> SyncPagingIterable&amp;lt;Group&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -7035,7 +6838,7 @@ client.hooks().delete("id");
 <dl>
 <dd>
 
-Update an existing hook.
+List all groups in your tenant.
 </dd>
 </dl>
 </dd>
@@ -7050,10 +6853,18 @@ Update an existing hook.
 <dd>
 
 ```java
-client.hooks().update(
-    "id",
-    UpdateHookRequestContent
+client.groups().list(
+    ListGroupsRequestParameters
         .builder()
+        .connectionId("connection_id")
+        .name("name")
+        .externalId("external_id")
+        .search("search")
+        .fields("fields")
+        .includeFields(true)
+        .includeTotals(true)
+        .from("from")
+        .take(1)
         .build()
 );
 ```
@@ -7070,7 +6881,7 @@ client.hooks().update(
 <dl>
 <dd>
 
-**id:** `String` — ID of the hook to update.
+**connectionId:** `Optional<String>` — Filter groups by connection ID.
     
 </dd>
 </dl>
@@ -7078,7 +6889,7 @@ client.hooks().update(
 <dl>
 <dd>
 
-**name:** `Optional<String>` — Name of this hook.
+**name:** `Optional<String>` — Filter groups by name.
     
 </dd>
 </dl>
@@ -7086,7 +6897,7 @@ client.hooks().update(
 <dl>
 <dd>
 
-**script:** `Optional<String>` — Code to be executed when this hook runs.
+**externalId:** `Optional<String>` — Filter groups by external ID.
     
 </dd>
 </dl>
@@ -7094,7 +6905,7 @@ client.hooks().update(
 <dl>
 <dd>
 
-**enabled:** `Optional<Boolean>` — Whether this hook will be executed (true) or ignored (false).
+**search:** `Optional<String>` — Search for groups by name or external ID.
     
 </dd>
 </dl>
@@ -7102,7 +6913,39 @@ client.hooks().update(
 <dl>
 <dd>
 
-**dependencies:** `Optional<Map<String, String>>` 
+**fields:** `Optional<String>` — A comma separated list of fields to include or exclude (depending on include_fields) from the result, empty to retrieve all fields
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**from:** `Optional<String>` — Optional Id from which to start selection.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
     
 </dd>
 </dl>
@@ -7114,8 +6957,7 @@ client.hooks().update(
 </dl>
 </details>
 
-## Jobs
-<details><summary><code>client.jobs.get(id) -> GetJobResponseContent</code></summary>
+<details><summary><code>client.groups.get(id) -> GetGroupResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -7127,7 +6969,7 @@ client.hooks().update(
 <dl>
 <dd>
 
-Retrieves a job. Useful to check its status.
+Retrieve a group by its ID.
 </dd>
 </dl>
 </dd>
@@ -7142,7 +6984,7 @@ Retrieves a job. Useful to check its status.
 <dd>
 
 ```java
-client.jobs().get("id");
+client.groups().get("id");
 ```
 </dd>
 </dl>
@@ -7157,7 +6999,7 @@ client.jobs().get("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the job.
+**id:** `String` — Unique identifier for the group (service-generated).
     
 </dd>
 </dl>
@@ -7169,8 +7011,7 @@ client.jobs().get("id");
 </dl>
 </details>
 
-## LogStreams
-<details><summary><code>client.logStreams.list() -> List&amp;lt;LogStreamResponseSchema&amp;gt;</code></summary>
+<details><summary><code>client.groups.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -7182,77 +7023,7 @@ client.jobs().get("id");
 <dl>
 <dd>
 
-Retrieve details on [log streams](https://auth0.com/docs/logs/streams).
-
-**Sample Response**
-
-```json
-[{
-  "id": "string",
-  "name": "string",
-  "type": "eventbridge",
-  "status": "active|paused|suspended",
-  "sink": {
-    "awsAccountId": "string",
-    "awsRegion": "string",
-    "awsPartnerEventSource": "string"
-  }
-}, {
-  "id": "string",
-  "name": "string",
-  "type": "http",
-  "status": "active|paused|suspended",
-  "sink": {
-    "httpContentFormat": "JSONLINES|JSONARRAY",
-    "httpContentType": "string",
-    "httpEndpoint": "string",
-    "httpAuthorization": "string"
-  }
-},
-{
-  "id": "string",
-  "name": "string",
-  "type": "eventgrid",
-  "status": "active|paused|suspended",
-  "sink": {
-    "azureSubscriptionId": "string",
-    "azureResourceGroup": "string",
-    "azureRegion": "string",
-    "azurePartnerTopic": "string"
-  }
-},
-{
-  "id": "string",
-  "name": "string",
-  "type": "splunk",
-  "status": "active|paused|suspended",
-  "sink": {
-    "splunkDomain": "string",
-    "splunkToken": "string",
-    "splunkPort": "string",
-    "splunkSecure": "boolean"
-  }
-},
-{
-  "id": "string",
-  "name": "string",
-  "type": "sumo",
-  "status": "active|paused|suspended",
-  "sink": {
-    "sumoSourceAddress": "string"
-  }
-},
-{
-  "id": "string",
-  "name": "string",
-  "type": "datadog",
-  "status": "active|paused|suspended",
-  "sink": {
-    "datadogRegion": "string",
-    "datadogApiKey": "string"
-  }
-}]
-```
+Delete a group by its ID.
 </dd>
 </dl>
 </dd>
@@ -7267,19 +7038,35 @@ Retrieve details on [log streams](https://auth0.com/docs/logs/streams).
 <dd>
 
 ```java
-client.logStreams().list();
+client.groups().delete("id");
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` — Unique identifier for the group (service-generated).
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
 
 </dd>
 </dl>
 </details>
 
-<details><summary><code>client.logStreams.create(request) -> CreateLogStreamResponseContent</code></summary>
+## Hooks
+<details><summary><code>client.hooks.list() -> SyncPagingIterable&amp;lt;Hook&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -7291,135 +7078,1148 @@ client.logStreams().list();
 <dl>
 <dd>
 
-Create a log stream.
-
-**Log Stream Types**
+Retrieve all [hooks](https://auth0.com/docs/hooks). Accepts a list of fields to include or exclude in the result.
+</dd>
+</dl>
+</dd>
+</dl>
 
-The `type` of log stream being created determines the properties required in the `sink` payload.
+#### 🔌 Usage
 
-**HTTP Stream**
+<dl>
+<dd>
 
-For an `http` Stream, the `sink` properties are listed in the payload below.
+<dl>
+<dd>
 
-**Request:**
-```json
-{
-  "name": "string",
-  "type": "http",
-  "sink": {
-    "httpEndpoint": "string",
-    "httpContentType": "string",
-    "httpContentFormat": "JSONLINES|JSONARRAY",
-    "httpAuthorization": "string"
-  }
-}
+```java
+client.hooks().list(
+    ListHooksRequestParameters
+        .builder()
+        .page(1)
+        .perPage(1)
+        .includeTotals(true)
+        .enabled(true)
+        .fields("fields")
+        .triggerId(HookTriggerIdEnum.CREDENTIALS_EXCHANGE)
+        .build()
+);
 ```
+</dd>
+</dl>
+</dd>
+</dl>
 
-**Response:**
-```json
-{
-  "id": "string",
-  "name": "string",
-  "type": "http",
-  "status": "active",
-  "sink": {
-    "httpEndpoint": "string",
-    "httpContentType": "string",
-    "httpContentFormat": "JSONLINES|JSONARRAY",
-    "httpAuthorization": "string"
-  }
-}
-```
+#### ⚙️ Parameters
 
-**Amazon EventBridge Stream**
+<dl>
+<dd>
 
-For an `eventbridge` Stream, the `sink` properties are listed in the payload below.
+<dl>
+<dd>
 
-**Request:**
-```json
-{
-  "name": "string",
-  "type": "eventbridge",
-  "sink": {
-    "awsRegion": "string",
-    "awsAccountId": "string"
-  }
-}
-```
+**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
+    
+</dd>
+</dl>
 
-The response will include an additional field `awsPartnerEventSource` in the `sink`:
+<dl>
+<dd>
 
-**Response:**
-```json
-{
-  "id": "string",
-  "name": "string",
-  "type": "eventbridge",
-  "status": "active",
-  "sink": {
-    "awsAccountId": "string",
-    "awsRegion": "string",
-    "awsPartnerEventSource": "string"
-  }
-}
-```
+**perPage:** `Optional<Integer>` — Number of results per page.
+    
+</dd>
+</dl>
 
-**Azure Event Grid Stream**
+<dl>
+<dd>
 
-For an `Azure Event Grid` Stream, the `sink` properties are listed in the payload below.
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+    
+</dd>
+</dl>
 
-**Request:**
-```json
-{
-  "name": "string",
-  "type": "eventgrid",
-  "sink": {
-    "azureSubscriptionId": "string",
-    "azureResourceGroup": "string",
-    "azureRegion": "string"
-  }
-}
-```
+<dl>
+<dd>
 
-**Response:**
-```json
-{
-  "id": "string",
-  "name": "string",
-  "type": "http",
-  "status": "active",
-  "sink": {
-    "azureSubscriptionId": "string",
-    "azureResourceGroup": "string",
-    "azureRegion": "string",
-    "azurePartnerTopic": "string"
-  }
-}
-```
+**enabled:** `Optional<Boolean>` — Optional filter on whether a hook is enabled (true) or disabled (false).
+    
+</dd>
+</dl>
 
-**Datadog Stream**
+<dl>
+<dd>
 
-For a `Datadog` Stream, the `sink` properties are listed in the payload below.
+**fields:** `Optional<String>` — Comma-separated list of fields to include in the result. Leave empty to retrieve all fields.
+    
+</dd>
+</dl>
 
-**Request:**
-```json
-{
-  "name": "string",
-  "type": "datadog",
-  "sink": {
-    "datadogRegion": "string",
-    "datadogApiKey": "string"
-  }
-}
-```
+<dl>
+<dd>
 
-**Response:**
-```json
+**triggerId:** `Optional<HookTriggerIdEnum>` — Retrieves hooks that match the trigger
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.hooks.create(request) -> CreateHookResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Create a new hook.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.hooks().create(
+    CreateHookRequestContent
+        .builder()
+        .name("name")
+        .script("script")
+        .triggerId(HookTriggerIdEnum.CREDENTIALS_EXCHANGE)
+        .build()
+);
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**name:** `String` — Name of this hook.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**script:** `String` — Code to be executed when this hook runs.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**enabled:** `Optional<Boolean>` — Whether this hook will be executed (true) or ignored (false).
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**dependencies:** `Optional<Map<String, String>>` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**triggerId:** `HookTriggerIdEnum` — Execution stage of this rule. Can be `credentials-exchange`, `pre-user-registration`, `post-user-registration`, `post-change-password`, or `send-phone-message`.
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.hooks.get(id) -> GetHookResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Retrieve [a hook](https://auth0.com/docs/hooks) by its ID. Accepts a list of fields to include in the result.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.hooks().get(
+    "id",
+    GetHookRequestParameters
+        .builder()
+        .fields("fields")
+        .build()
+);
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` — ID of the hook to retrieve.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**fields:** `Optional<String>` — Comma-separated list of fields to include in the result. Leave empty to retrieve all fields.
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.hooks.delete(id)</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Delete a hook.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.hooks().delete("id");
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` — ID of the hook to delete.
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.hooks.update(id, request) -> UpdateHookResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Update an existing hook.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.hooks().update(
+    "id",
+    UpdateHookRequestContent
+        .builder()
+        .build()
+);
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` — ID of the hook to update.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**name:** `Optional<String>` — Name of this hook.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**script:** `Optional<String>` — Code to be executed when this hook runs.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**enabled:** `Optional<Boolean>` — Whether this hook will be executed (true) or ignored (false).
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**dependencies:** `Optional<Map<String, String>>` 
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+## Jobs
+<details><summary><code>client.jobs.get(id) -> GetJobResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Retrieves a job. Useful to check its status.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.jobs().get("id");
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` — ID of the job.
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+## LogStreams
+<details><summary><code>client.logStreams.list() -> List&amp;lt;LogStreamResponseSchema&amp;gt;</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Retrieve details on [log streams](https://auth0.com/docs/logs/streams).
+
+**Sample Response**
+
+```json
+[{
+  "id": "string",
+  "name": "string",
+  "type": "eventbridge",
+  "status": "active|paused|suspended",
+  "sink": {
+    "awsAccountId": "string",
+    "awsRegion": "string",
+    "awsPartnerEventSource": "string"
+  }
+}, {
+  "id": "string",
+  "name": "string",
+  "type": "http",
+  "status": "active|paused|suspended",
+  "sink": {
+    "httpContentFormat": "JSONLINES|JSONARRAY",
+    "httpContentType": "string",
+    "httpEndpoint": "string",
+    "httpAuthorization": "string"
+  }
+},
+{
+  "id": "string",
+  "name": "string",
+  "type": "eventgrid",
+  "status": "active|paused|suspended",
+  "sink": {
+    "azureSubscriptionId": "string",
+    "azureResourceGroup": "string",
+    "azureRegion": "string",
+    "azurePartnerTopic": "string"
+  }
+},
+{
+  "id": "string",
+  "name": "string",
+  "type": "splunk",
+  "status": "active|paused|suspended",
+  "sink": {
+    "splunkDomain": "string",
+    "splunkToken": "string",
+    "splunkPort": "string",
+    "splunkSecure": "boolean"
+  }
+},
+{
+  "id": "string",
+  "name": "string",
+  "type": "sumo",
+  "status": "active|paused|suspended",
+  "sink": {
+    "sumoSourceAddress": "string"
+  }
+},
+{
+  "id": "string",
+  "name": "string",
+  "type": "datadog",
+  "status": "active|paused|suspended",
+  "sink": {
+    "datadogRegion": "string",
+    "datadogApiKey": "string"
+  }
+}]
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.logStreams().list();
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.logStreams.create(request) -> CreateLogStreamResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Create a log stream.
+
+**Log Stream Types**
+
+The `type` of log stream being created determines the properties required in the `sink` payload.
+
+**HTTP Stream**
+
+For an `http` Stream, the `sink` properties are listed in the payload below.
+
+**Request:**
+```json
+{
+  "name": "string",
+  "type": "http",
+  "sink": {
+    "httpEndpoint": "string",
+    "httpContentType": "string",
+    "httpContentFormat": "JSONLINES|JSONARRAY",
+    "httpAuthorization": "string"
+  }
+}
+```
+
+**Response:**
+```json
+{
+  "id": "string",
+  "name": "string",
+  "type": "http",
+  "status": "active",
+  "sink": {
+    "httpEndpoint": "string",
+    "httpContentType": "string",
+    "httpContentFormat": "JSONLINES|JSONARRAY",
+    "httpAuthorization": "string"
+  }
+}
+```
+
+**Amazon EventBridge Stream**
+
+For an `eventbridge` Stream, the `sink` properties are listed in the payload below.
+
+**Request:**
+```json
+{
+  "name": "string",
+  "type": "eventbridge",
+  "sink": {
+    "awsRegion": "string",
+    "awsAccountId": "string"
+  }
+}
+```
+
+The response will include an additional field `awsPartnerEventSource` in the `sink`:
+
+**Response:**
+```json
+{
+  "id": "string",
+  "name": "string",
+  "type": "eventbridge",
+  "status": "active",
+  "sink": {
+    "awsAccountId": "string",
+    "awsRegion": "string",
+    "awsPartnerEventSource": "string"
+  }
+}
+```
+
+**Azure Event Grid Stream**
+
+For an `Azure Event Grid` Stream, the `sink` properties are listed in the payload below.
+
+**Request:**
+```json
+{
+  "name": "string",
+  "type": "eventgrid",
+  "sink": {
+    "azureSubscriptionId": "string",
+    "azureResourceGroup": "string",
+    "azureRegion": "string"
+  }
+}
+```
+
+**Response:**
+```json
+{
+  "id": "string",
+  "name": "string",
+  "type": "http",
+  "status": "active",
+  "sink": {
+    "azureSubscriptionId": "string",
+    "azureResourceGroup": "string",
+    "azureRegion": "string",
+    "azurePartnerTopic": "string"
+  }
+}
+```
+
+**Datadog Stream**
+
+For a `Datadog` Stream, the `sink` properties are listed in the payload below.
+
+**Request:**
+```json
+{
+  "name": "string",
+  "type": "datadog",
+  "sink": {
+    "datadogRegion": "string",
+    "datadogApiKey": "string"
+  }
+}
+```
+
+**Response:**
+```json
+{
+  "id": "string",
+  "name": "string",
+  "type": "datadog",
+  "status": "active",
+  "sink": {
+    "datadogRegion": "string",
+    "datadogApiKey": "string"
+  }
+}
+```
+
+**Splunk Stream**
+
+For a `Splunk` Stream, the `sink` properties are listed in the payload below.
+
+**Request:**
+```json
+{
+  "name": "string",
+  "type": "splunk",
+  "sink": {
+    "splunkDomain": "string",
+    "splunkToken": "string",
+    "splunkPort": "string",
+    "splunkSecure": "boolean"
+  }
+}
+```
+
+**Response:**
+```json
+{
+  "id": "string",
+  "name": "string",
+  "type": "splunk",
+  "status": "active",
+  "sink": {
+    "splunkDomain": "string",
+    "splunkToken": "string",
+    "splunkPort": "string",
+    "splunkSecure": "boolean"
+  }
+}
+```
+
+**Sumo Logic Stream**
+
+For a `Sumo Logic` Stream, the `sink` properties are listed in the payload below.
+
+**Request:**
+```json
+{
+  "name": "string",
+  "type": "sumo",
+  "sink": {
+    "sumoSourceAddress": "string"
+  }
+}
+```
+
+**Response:**
+```json
+{
+  "id": "string",
+  "name": "string",
+  "type": "sumo",
+  "status": "active",
+  "sink": {
+    "sumoSourceAddress": "string"
+  }
+}
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.logStreams().create(
+    CreateLogStreamRequestContent.of(
+        CreateLogStreamHttpRequestBody
+            .builder()
+            .type(LogStreamHttpEnum.HTTP)
+            .sink(
+                LogStreamHttpSink
+                    .builder()
+                    .httpEndpoint("httpEndpoint")
+                    .build()
+            )
+            .build()
+    )
+);
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**request:** `CreateLogStreamRequestContent` 
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.logStreams.get(id) -> GetLogStreamResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Retrieve a log stream configuration and status.
+
+**Sample responses**
+
+**Amazon EventBridge Log Stream**
+
+```json
+{
+  "id": "string",
+  "name": "string",
+  "type": "eventbridge",
+  "status": "active|paused|suspended",
+  "sink": {
+    "awsAccountId": "string",
+    "awsRegion": "string",
+    "awsPartnerEventSource": "string"
+  }
+}
+```
+
+**HTTP Log Stream**
+
+```json
+{
+  "id": "string",
+  "name": "string",
+  "type": "http",
+  "status": "active|paused|suspended",
+  "sink": {
+    "httpContentFormat": "JSONLINES|JSONARRAY",
+    "httpContentType": "string",
+    "httpEndpoint": "string",
+    "httpAuthorization": "string"
+  }
+}
+```
+
+**Datadog Log Stream**
+
+```json
+{
+  "id": "string",
+  "name": "string",
+  "type": "datadog",
+  "status": "active|paused|suspended",
+  "sink": {
+    "datadogRegion": "string",
+    "datadogApiKey": "string"
+  }
+}
+```
+
+**Mixpanel**
+
+**Request:**
+
+```json
+{
+  "name": "string",
+  "type": "mixpanel",
+  "sink": {
+    "mixpanelRegion": "string",
+    "mixpanelProjectId": "string",
+    "mixpanelServiceAccountUsername": "string",
+    "mixpanelServiceAccountPassword": "string"
+  }
+}
+```
+
+**Response:**
+
+```json
+{
+  "id": "string",
+  "name": "string",
+  "type": "mixpanel",
+  "status": "active",
+  "sink": {
+    "mixpanelRegion": "string",
+    "mixpanelProjectId": "string",
+    "mixpanelServiceAccountUsername": "string",
+    "mixpanelServiceAccountPassword": "string"
+  }
+}
+```
+
+**Segment**
+
+**Request:**
+
+```json
+{
+  "name": "string",
+  "type": "segment",
+  "sink": {
+    "segmentWriteKey": "string"
+  }
+}
+```
+
+**Response:**
+
+```json
+{
+  "id": "string",
+  "name": "string",
+  "type": "segment",
+  "status": "active",
+  "sink": {
+    "segmentWriteKey": "string"
+  }
+}
+```
+
+**Splunk Log Stream**
+
+```json
+{
+  "id": "string",
+  "name": "string",
+  "type": "splunk",
+  "status": "active|paused|suspended",
+  "sink": {
+    "splunkDomain": "string",
+    "splunkToken": "string",
+    "splunkPort": "string",
+    "splunkSecure": "boolean"
+  }
+}
+```
+
+**Sumo Logic Log Stream**
+
+```json
+{
+  "id": "string",
+  "name": "string",
+  "type": "sumo",
+  "status": "active|paused|suspended",
+  "sink": {
+    "sumoSourceAddress": "string"
+  }
+}
+```
+
+**Status**
+
+The `status` of a log stream maybe any of the following:
+
+1. `active` - Stream is currently enabled.
+2. `paused` - Stream is currently user disabled and will not attempt log delivery.
+3. `suspended` - Stream is currently disabled because of errors and will not attempt log delivery.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.logStreams().get("id");
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` — The id of the log stream to get
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.logStreams.delete(id)</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Delete a log stream.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.logStreams().delete("id");
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` — The id of the log stream to delete
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.logStreams.update(id, request) -> UpdateLogStreamResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Update a log stream.
+
+**Examples of how to use the PATCH endpoint.**
+
+The following fields may be updated in a PATCH operation:
+
+- name
+- status
+- sink
+
+Note: For log streams of type `eventbridge` and `eventgrid`, updating the `sink` is not permitted.
+
+**Update the status of a log stream**
+
+```json
+{
+  "status": "active|paused"
+}
+```
+
+**Update the name of a log stream**
+
+```json
+{
+  "name": "string"
+}
+```
+
+**Update the sink properties of a stream of type `http`**
+
+```json
+{
+  "sink": {
+    "httpEndpoint": "string",
+    "httpContentType": "string",
+    "httpContentFormat": "JSONARRAY|JSONLINES",
+    "httpAuthorization": "string"
+  }
+}
+```
+
+**Update the sink properties of a stream of type `datadog`**
+
+```json
 {
-  "id": "string",
-  "name": "string",
-  "type": "datadog",
-  "status": "active",
   "sink": {
     "datadogRegion": "string",
     "datadogApiKey": "string"
@@ -7427,72 +8227,564 @@ For a `Datadog` Stream, the `sink` properties are listed in the payload below.
 }
 ```
 
-**Splunk Stream**
+**Update the sink properties of a stream of type `splunk`**
+
+```json
+{
+  "sink": {
+    "splunkDomain": "string",
+    "splunkToken": "string",
+    "splunkPort": "string",
+    "splunkSecure": "boolean"
+  }
+}
+```
+
+**Update the sink properties of a stream of type `sumo`**
+
+```json
+{
+  "sink": {
+    "sumoSourceAddress": "string"
+  }
+}
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.logStreams().update(
+    "id",
+    UpdateLogStreamRequestContent
+        .builder()
+        .build()
+);
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` — The id of the log stream to get
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**name:** `Optional<String>` — log stream name
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**status:** `Optional<LogStreamStatusEnum>` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**isPriority:** `Optional<Boolean>` — True for priority log streams, false for non-priority
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**filters:** `Optional<List<LogStreamFilter>>` — Only logs events matching these filters will be delivered by the stream. If omitted or empty, all events will be delivered.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**piiConfig:** `Optional<LogStreamPiiConfig>` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**sink:** `Optional<LogStreamSinkPatch>` 
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+## Logs
+<details><summary><code>client.logs.list() -> SyncPagingIterable&amp;lt;Log&amp;gt;</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Retrieve log entries that match the specified search criteria (or all log entries if no criteria specified).
+
+Set custom search criteria using the `q` parameter, or search from a specific log ID (_"search from checkpoint"_).
+
+For more information on all possible event types, their respective acronyms, and descriptions, see [Log Event Type Codes](https://auth0.com/docs/logs/log-event-type-codes).
+
+**To set custom search criteria, use the following parameters:**
+
+- **q:** Search Criteria using [Query String Syntax](https://auth0.com/docs/logs/log-search-query-syntax)
+- **page:** Page index of the results to return. First page is 0.
+- **per_page:** Number of results per page.
+- **sort:** Field to use for sorting appended with `:1` for ascending and `:-1` for descending. e.g. `date:-1`
+- **fields:** Comma-separated list of fields to include or exclude (depending on include_fields) from the result, empty to retrieve all fields.
+- **include_fields:** Whether specified fields are to be included (true) or excluded (false).
+- **include_totals:** Return results inside an object that contains the total result count (true) or as a direct array of results (false, default). **Deprecated:** this field is deprecated and should be removed from use. See [Search Engine V3 Breaking Changes](https://auth0.com/docs/product-lifecycle/deprecations-and-migrations/migrate-to-tenant-log-search-v3#pagination)
+
+For more information on the list of fields that can be used in `fields` and `sort`, see [Searchable Fields](https://auth0.com/docs/logs/log-search-query-syntax#searchable-fields).
+
+Auth0 [limits the number of logs](https://auth0.com/docs/logs/retrieve-log-events-using-mgmt-api#limitations) you can return by search criteria to 100 logs per request. Furthermore, you may paginate only through 1,000 search results. If you exceed this threshold, please redefine your search or use the [get logs by checkpoint method](https://auth0.com/docs/logs/retrieve-log-events-using-mgmt-api#retrieve-logs-by-checkpoint).
+
+**To search from a checkpoint log ID, use the following parameters:**
+
+- **from:** Log Event ID from which to start retrieving logs. You can limit the number of logs returned using the `take` parameter. If you use `from` at the same time as `q`, `from` takes precedence and `q` is ignored.
+- **take:** Number of entries to retrieve when using the `from` parameter.
+
+**Important:** When fetching logs from a checkpoint log ID, any parameter other than `from` and `take` will be ignored, and date ordering is not guaranteed.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.logs().list(
+    ListLogsRequestParameters
+        .builder()
+        .page(1)
+        .perPage(1)
+        .sort("sort")
+        .fields("fields")
+        .includeFields(true)
+        .includeTotals(true)
+        .search("search")
+        .build()
+);
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**perPage:** `Optional<Integer>` —  Number of results per page. Paging is disabled if parameter not sent. Default: <code>50</code>. Max value: <code>100</code>
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**sort:** `Optional<String>` — Field to use for sorting appended with <code>:1</code>  for ascending and <code>:-1</code> for descending. e.g. <code>date:-1</code>
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for <code>include_fields</code>) in the result. Leave empty to retrieve all fields.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (<code>true</code>) or excluded (<code>false</code>)
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**includeTotals:** `Optional<Boolean>` — Return results as an array when false (default). Return results inside an object that also contains a total result count when true.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**search:** `Optional<String>` 
+
+Retrieves logs that match the specified search criteria. This parameter can be combined with all the others in the /api/logs endpoint but is specified separately for clarity.
+If no fields are provided a case insensitive 'starts with' search is performed on all of the following fields: client_name, connection, user_name. Otherwise, you can specify multiple fields and specify the search using the %field%:%search%, for example: application:node user:"John@contoso.com".
+Values specified without quotes are matched using a case insensitive 'starts with' search. If quotes are used a case insensitve exact search is used. If multiple fields are used, the AND operator is used to join the clauses.
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.logs.get(id) -> GetLogResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Retrieve an individual log event.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.logs().get("id");
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` — log_id of the log to retrieve.
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+## NetworkAcls
+<details><summary><code>client.networkAcls.list() -> SyncPagingIterable&amp;lt;NetworkAclsResponseContent&amp;gt;</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Get all access control list entries for your client.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.networkAcls().list(
+    ListNetworkAclsRequestParameters
+        .builder()
+        .page(1)
+        .perPage(1)
+        .includeTotals(true)
+        .build()
+);
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**page:** `Optional<Integer>` — Use this field to request a specific page of the list results.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**perPage:** `Optional<Integer>` — The amount of results per page.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.networkAcls.create(request)</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
 
-For a `Splunk` Stream, the `sink` properties are listed in the payload below.
+<dl>
+<dd>
 
-**Request:**
-```json
-{
-  "name": "string",
-  "type": "splunk",
-  "sink": {
-    "splunkDomain": "string",
-    "splunkToken": "string",
-    "splunkPort": "string",
-    "splunkSecure": "boolean"
-  }
-}
-```
+<dl>
+<dd>
 
-**Response:**
-```json
-{
-  "id": "string",
-  "name": "string",
-  "type": "splunk",
-  "status": "active",
-  "sink": {
-    "splunkDomain": "string",
-    "splunkToken": "string",
-    "splunkPort": "string",
-    "splunkSecure": "boolean"
-  }
-}
-```
+Create a new access control list for your client.
+</dd>
+</dl>
+</dd>
+</dl>
 
-**Sumo Logic Stream**
+#### 🔌 Usage
 
-For a `Sumo Logic` Stream, the `sink` properties are listed in the payload below.
+<dl>
+<dd>
 
-**Request:**
-```json
-{
-  "name": "string",
-  "type": "sumo",
-  "sink": {
-    "sumoSourceAddress": "string"
-  }
-}
+<dl>
+<dd>
+
+```java
+client.networkAcls().create(
+    CreateNetworkAclRequestContent
+        .builder()
+        .description("description")
+        .active(true)
+        .rule(
+            NetworkAclRule
+                .builder()
+                .action(
+                    NetworkAclAction
+                        .builder()
+                        .build()
+                )
+                .scope(NetworkAclRuleScopeEnum.MANAGEMENT)
+                .build()
+        )
+        .build()
+);
 ```
+</dd>
+</dl>
+</dd>
+</dl>
 
-**Response:**
-```json
-{
-  "id": "string",
-  "name": "string",
-  "type": "sumo",
-  "status": "active",
-  "sink": {
-    "sumoSourceAddress": "string"
-  }
-}
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**description:** `String` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**active:** `Boolean` — Indicates whether or not this access control list is actively being used
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**priority:** `Optional<Double>` — Indicates the order in which the ACL will be evaluated relative to other ACL rules.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**rule:** `NetworkAclRule` 
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.networkAcls.get(id) -> GetNetworkAclsResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Get a specific access control list entry for your client.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.networkAcls().get("id");
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` — The id of the access control list to retrieve.
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.networkAcls.set(id, request) -> SetNetworkAclsResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Update existing access control list for your client.
+</dd>
+</dl>
+</dd>
+</dl>
+
 #### 🔌 Usage
 
 <dl>
@@ -7502,19 +8794,24 @@ For a `Sumo Logic` Stream, the `sink` properties are listed in the payload below
 <dd>
 
 ```java
-client.logStreams().create(
-    CreateLogStreamRequestContent.of(
-        CreateLogStreamHttpRequestBody
-            .builder()
-            .type(LogStreamHttpEnum.HTTP)
-            .sink(
-                LogStreamHttpSink
-                    .builder()
-                    .httpEndpoint("httpEndpoint")
-                    .build()
-            )
-            .build()
-    )
+client.networkAcls().set(
+    "id",
+    SetNetworkAclRequestContent
+        .builder()
+        .description("description")
+        .active(true)
+        .rule(
+            NetworkAclRule
+                .builder()
+                .action(
+                    NetworkAclAction
+                        .builder()
+                        .build()
+                )
+                .scope(NetworkAclRuleScopeEnum.MANAGEMENT)
+                .build()
+        )
+        .build()
 );
 ```
 </dd>
@@ -7522,15 +8819,47 @@ client.logStreams().create(
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` — The id of the ACL to update.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**description:** `String` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**active:** `Boolean` — Indicates whether or not this access control list is actively being used
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
+**priority:** `Optional<Double>` — Indicates the order in which the ACL will be evaluated relative to other ACL rules.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**request:** `CreateLogStreamRequestContent` 
+**rule:** `NetworkAclRule` 
     
 </dd>
 </dl>
@@ -7542,7 +8871,7 @@ client.logStreams().create(
 </dl>
 </details>
 
-<details><summary><code>client.logStreams.get(id) -> GetLogStreamResponseContent</code></summary>
+<details><summary><code>client.networkAcls.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -7554,158 +8883,7 @@ client.logStreams().create(
 <dl>
 <dd>
 
-Retrieve a log stream configuration and status.
-
-**Sample responses**
-
-**Amazon EventBridge Log Stream**
-
-```json
-{
-  "id": "string",
-  "name": "string",
-  "type": "eventbridge",
-  "status": "active|paused|suspended",
-  "sink": {
-    "awsAccountId": "string",
-    "awsRegion": "string",
-    "awsPartnerEventSource": "string"
-  }
-}
-```
-
-**HTTP Log Stream**
-
-```json
-{
-  "id": "string",
-  "name": "string",
-  "type": "http",
-  "status": "active|paused|suspended",
-  "sink": {
-    "httpContentFormat": "JSONLINES|JSONARRAY",
-    "httpContentType": "string",
-    "httpEndpoint": "string",
-    "httpAuthorization": "string"
-  }
-}
-```
-
-**Datadog Log Stream**
-
-```json
-{
-  "id": "string",
-  "name": "string",
-  "type": "datadog",
-  "status": "active|paused|suspended",
-  "sink": {
-    "datadogRegion": "string",
-    "datadogApiKey": "string"
-  }
-}
-```
-
-**Mixpanel**
-
-**Request:**
-
-```json
-{
-  "name": "string",
-  "type": "mixpanel",
-  "sink": {
-    "mixpanelRegion": "string",
-    "mixpanelProjectId": "string",
-    "mixpanelServiceAccountUsername": "string",
-    "mixpanelServiceAccountPassword": "string"
-  }
-}
-```
-
-**Response:**
-
-```json
-{
-  "id": "string",
-  "name": "string",
-  "type": "mixpanel",
-  "status": "active",
-  "sink": {
-    "mixpanelRegion": "string",
-    "mixpanelProjectId": "string",
-    "mixpanelServiceAccountUsername": "string",
-    "mixpanelServiceAccountPassword": "string"
-  }
-}
-```
-
-**Segment**
-
-**Request:**
-
-```json
-{
-  "name": "string",
-  "type": "segment",
-  "sink": {
-    "segmentWriteKey": "string"
-  }
-}
-```
-
-**Response:**
-
-```json
-{
-  "id": "string",
-  "name": "string",
-  "type": "segment",
-  "status": "active",
-  "sink": {
-    "segmentWriteKey": "string"
-  }
-}
-```
-
-**Splunk Log Stream**
-
-```json
-{
-  "id": "string",
-  "name": "string",
-  "type": "splunk",
-  "status": "active|paused|suspended",
-  "sink": {
-    "splunkDomain": "string",
-    "splunkToken": "string",
-    "splunkPort": "string",
-    "splunkSecure": "boolean"
-  }
-}
-```
-
-**Sumo Logic Log Stream**
-
-```json
-{
-  "id": "string",
-  "name": "string",
-  "type": "sumo",
-  "status": "active|paused|suspended",
-  "sink": {
-    "sumoSourceAddress": "string"
-  }
-}
-```
-
-**Status**
-
-The `status` of a log stream maybe any of the following:
-
-1. `active` - Stream is currently enabled.
-2. `paused` - Stream is currently user disabled and will not attempt log delivery.
-3. `suspended` - Stream is currently disabled because of errors and will not attempt log delivery.
+Delete existing access control list for your client.
 </dd>
 </dl>
 </dd>
@@ -7720,7 +8898,7 @@ The `status` of a log stream maybe any of the following:
 <dd>
 
 ```java
-client.logStreams().get("id");
+client.networkAcls().delete("id");
 ```
 </dd>
 </dl>
@@ -7735,7 +8913,7 @@ client.logStreams().get("id");
 <dl>
 <dd>
 
-**id:** `String` — The id of the log stream to get
+**id:** `String` — The id of the ACL to delete
     
 </dd>
 </dl>
@@ -7747,7 +8925,7 @@ client.logStreams().get("id");
 </dl>
 </details>
 
-<details><summary><code>client.logStreams.delete(id)</code></summary>
+<details><summary><code>client.networkAcls.update(id, request) -> UpdateNetworkAclResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -7759,7 +8937,7 @@ client.logStreams().get("id");
 <dl>
 <dd>
 
-Delete a log stream.
+Update existing access control list for your client.
 </dd>
 </dl>
 </dd>
@@ -7774,7 +8952,12 @@ Delete a log stream.
 <dd>
 
 ```java
-client.logStreams().delete("id");
+client.networkAcls().update(
+    "id",
+    UpdateNetworkAclRequestContent
+        .builder()
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -7789,104 +8972,80 @@ client.logStreams().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — The id of the log stream to delete
+**id:** `String` — The id of the ACL to update.
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
+**description:** `Optional<String>` 
+    
 </dd>
 </dl>
-</details>
 
-<details><summary><code>client.logStreams.update(id, request) -> UpdateLogStreamResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+**active:** `Optional<Boolean>` — Indicates whether or not this access control list is actively being used
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**priority:** `Optional<Double>` — Indicates the order in which the ACL will be evaluated relative to other ACL rules.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-Update a log stream.
-
-**Examples of how to use the PATCH endpoint.**
-
-The following fields may be updated in a PATCH operation:
-
-- name
-- status
-- sink
-
-Note: For log streams of type `eventbridge` and `eventgrid`, updating the `sink` is not permitted.
+**rule:** `Optional<NetworkAclRule>` 
+    
+</dd>
+</dl>
+</dd>
+</dl>
 
-**Update the status of a log stream**
 
-```json
-{
-  "status": "active|paused"
-}
-```
+</dd>
+</dl>
+</details>
 
-**Update the name of a log stream**
+## Organizations
+<details><summary><code>client.organizations.list() -> SyncPagingIterable&amp;lt;Organization&amp;gt;</code></summary>
+<dl>
+<dd>
 
-```json
-{
-  "name": "string"
-}
-```
+#### 📝 Description
 
-**Update the sink properties of a stream of type `http`**
+<dl>
+<dd>
 
-```json
-{
-  "sink": {
-    "httpEndpoint": "string",
-    "httpContentType": "string",
-    "httpContentFormat": "JSONARRAY|JSONLINES",
-    "httpAuthorization": "string"
-  }
-}
-```
+<dl>
+<dd>
 
-**Update the sink properties of a stream of type `datadog`**
+Retrieve detailed list of all Organizations available in your tenant. For more information, see Auth0 Organizations.
 
-```json
-{
-  "sink": {
-    "datadogRegion": "string",
-    "datadogApiKey": "string"
-  }
-}
-```
+This endpoint supports two types of pagination:
 
-**Update the sink properties of a stream of type `splunk`**
+- Offset pagination
+- Checkpoint pagination
 
-```json
-{
-  "sink": {
-    "splunkDomain": "string",
-    "splunkToken": "string",
-    "splunkPort": "string",
-    "splunkSecure": "boolean"
-  }
-}
-```
+Checkpoint pagination must be used if you need to retrieve more than 1000 organizations.
 
-**Update the sink properties of a stream of type `sumo`**
+**Checkpoint Pagination**
 
-```json
-{
-  "sink": {
-    "sumoSourceAddress": "string"
-  }
-}
-```
+To search by checkpoint, use the following parameters:
+
+- `from`: Optional id from which to start selection.
+- `take`: The total number of entries to retrieve when using the `from` parameter. Defaults to 50.
+
+**Note**: The first time you call this endpoint using checkpoint pagination, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no pages are remaining.
 </dd>
 </dl>
 </dd>
@@ -7901,10 +9060,14 @@ Note: For log streams of type `eventbridge` and `eventgrid`, updating the `sink`
 <dd>
 
 ```java
-client.logStreams().update(
-    "id",
-    UpdateLogStreamRequestContent
+client.organizations().list(
+    ListOrganizationsRequestParameters
         .builder()
+        .includeTotals(true)
+        .from("from")
+        .take(1)
+        .sort("sort")
+        .includeClientAssociationFor("include_client_association_for")
         .build()
 );
 ```
@@ -7921,23 +9084,7 @@ client.logStreams().update(
 <dl>
 <dd>
 
-**id:** `String` — The id of the log stream to get
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**name:** `Optional<String>` — log stream name
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**status:** `Optional<LogStreamStatusEnum>` 
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
     
 </dd>
 </dl>
@@ -7945,7 +9092,7 @@ client.logStreams().update(
 <dl>
 <dd>
 
-**isPriority:** `Optional<Boolean>` — True for priority log streams, false for non-priority
+**from:** `Optional<String>` — Optional Id from which to start selection.
     
 </dd>
 </dl>
@@ -7953,7 +9100,7 @@ client.logStreams().update(
 <dl>
 <dd>
 
-**filters:** `Optional<List<LogStreamFilter>>` — Only logs events matching these filters will be delivered by the stream. If omitted or empty, all events will be delivered.
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
     
 </dd>
 </dl>
@@ -7961,7 +9108,7 @@ client.logStreams().update(
 <dl>
 <dd>
 
-**piiConfig:** `Optional<LogStreamPiiConfig>` 
+**sort:** `Optional<String>` — Field to sort by. Use <code>field:order</code> where order is <code>1</code> for ascending and <code>-1</code> for descending. e.g. <code>created_at:1</code>. We currently support sorting by the following fields: <code>name</code>, <code>display_name</code> and <code>created_at</code>.
     
 </dd>
 </dl>
@@ -7969,7 +9116,7 @@ client.logStreams().update(
 <dl>
 <dd>
 
-**sink:** `Optional<LogStreamSinkPatch>` 
+**includeClientAssociationFor:** `Optional<String>` — Client ID. When set, each returned organization that has an association with this client gains a <code>client</code> object describing it; organizations without one omit the field.
     
 </dd>
 </dl>
@@ -7981,8 +9128,7 @@ client.logStreams().update(
 </dl>
 </details>
 
-## Logs
-<details><summary><code>client.logs.list() -> SyncPagingIterable&amp;lt;Log&amp;gt;</code></summary>
+<details><summary><code>client.organizations.create(request) -> CreateOrganizationResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -7994,32 +9140,7 @@ client.logStreams().update(
 <dl>
 <dd>
 
-Retrieve log entries that match the specified search criteria (or all log entries if no criteria specified).
-
-Set custom search criteria using the `q` parameter, or search from a specific log ID (_"search from checkpoint"_).
-
-For more information on all possible event types, their respective acronyms, and descriptions, see [Log Event Type Codes](https://auth0.com/docs/logs/log-event-type-codes).
-
-**To set custom search criteria, use the following parameters:**
-
-- **q:** Search Criteria using [Query String Syntax](https://auth0.com/docs/logs/log-search-query-syntax)
-- **page:** Page index of the results to return. First page is 0.
-- **per_page:** Number of results per page.
-- **sort:** Field to use for sorting appended with `:1` for ascending and `:-1` for descending. e.g. `date:-1`
-- **fields:** Comma-separated list of fields to include or exclude (depending on include_fields) from the result, empty to retrieve all fields.
-- **include_fields:** Whether specified fields are to be included (true) or excluded (false).
-- **include_totals:** Return results inside an object that contains the total result count (true) or as a direct array of results (false, default). **Deprecated:** this field is deprecated and should be removed from use. See [Search Engine V3 Breaking Changes](https://auth0.com/docs/product-lifecycle/deprecations-and-migrations/migrate-to-tenant-log-search-v3#pagination)
-
-For more information on the list of fields that can be used in `fields` and `sort`, see [Searchable Fields](https://auth0.com/docs/logs/log-search-query-syntax#searchable-fields).
-
-Auth0 [limits the number of logs](https://auth0.com/docs/logs/retrieve-log-events-using-mgmt-api#limitations) you can return by search criteria to 100 logs per request. Furthermore, you may paginate only through 1,000 search results. If you exceed this threshold, please redefine your search or use the [get logs by checkpoint method](https://auth0.com/docs/logs/retrieve-log-events-using-mgmt-api#retrieve-logs-by-checkpoint).
-
-**To search from a checkpoint log ID, use the following parameters:**
-
-- **from:** Log Event ID from which to start retrieving logs. You can limit the number of logs returned using the `take` parameter. If you use `from` at the same time as `q`, `from` takes precedence and `q` is ignored.
-- **take:** Number of entries to retrieve when using the `from` parameter.
-
-**Important:** When fetching logs from a checkpoint log ID, any parameter other than `from` and `take` will be ignored, and date ordering is not guaranteed.
+Create a new Organization within your tenant.  To learn more about Organization settings, behavior, and configuration options, review [Create Your First Organization](https://auth0.com/docs/manage-users/organizations/create-first-organization).
 </dd>
 </dl>
 </dd>
@@ -8034,16 +9155,10 @@ Auth0 [limits the number of logs](https://auth0.com/docs/logs/retrieve-log-event
 <dd>
 
 ```java
-client.logs().list(
-    ListLogsRequestParameters
+client.organizations().create(
+    CreateOrganizationRequestContent
         .builder()
-        .page(1)
-        .perPage(1)
-        .sort("sort")
-        .fields("fields")
-        .includeFields(true)
-        .includeTotals(true)
-        .search("search")
+        .name("name")
         .build()
 );
 ```
@@ -8060,7 +9175,7 @@ client.logs().list(
 <dl>
 <dd>
 
-**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
+**name:** `String` — The name of this organization.
     
 </dd>
 </dl>
@@ -8068,7 +9183,7 @@ client.logs().list(
 <dl>
 <dd>
 
-**perPage:** `Optional<Integer>` —  Number of results per page. Paging is disabled if parameter not sent. Default: <code>50</code>. Max value: <code>100</code>
+**displayName:** `Optional<String>` — Friendly name of this organization.
     
 </dd>
 </dl>
@@ -8076,7 +9191,7 @@ client.logs().list(
 <dl>
 <dd>
 
-**sort:** `Optional<String>` — Field to use for sorting appended with <code>:1</code>  for ascending and <code>:-1</code> for descending. e.g. <code>date:-1</code>
+**branding:** `Optional<OrganizationBranding>` 
     
 </dd>
 </dl>
@@ -8084,7 +9199,7 @@ client.logs().list(
 <dl>
 <dd>
 
-**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for <code>include_fields</code>) in the result. Leave empty to retrieve all fields.
+**metadata:** `Optional<Map<String, Optional<String>>>` 
     
 </dd>
 </dl>
@@ -8092,7 +9207,7 @@ client.logs().list(
 <dl>
 <dd>
 
-**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (<code>true</code>) or excluded (<code>false</code>)
+**enabledConnections:** `Optional<List<ConnectionForOrganization>>` — Connections that will be enabled for this organization. See POST enabled_connections endpoint for the object format. (Max of 10 connections allowed)
     
 </dd>
 </dl>
@@ -8100,7 +9215,7 @@ client.logs().list(
 <dl>
 <dd>
 
-**includeTotals:** `Optional<Boolean>` — Return results as an array when false (default). Return results inside an object that also contains a total result count when true.
+**tokenQuota:** `Optional<CreateTokenQuota>` 
     
 </dd>
 </dl>
@@ -8108,11 +9223,15 @@ client.logs().list(
 <dl>
 <dd>
 
-**search:** `Optional<String>` 
+**thirdPartyClientAccess:** `Optional<OrganizationThirdPartyClientAccessEnum>` 
+    
+</dd>
+</dl>
 
-Retrieves logs that match the specified search criteria. This parameter can be combined with all the others in the /api/logs endpoint but is specified separately for clarity.
-If no fields are provided a case insensitive 'starts with' search is performed on all of the following fields: client_name, connection, user_name. Otherwise, you can specify multiple fields and specify the search using the %field%:%search%, for example: application:node user:"John@contoso.com".
-Values specified without quotes are matched using a case insensitive 'starts with' search. If quotes are used a case insensitve exact search is used. If multiple fields are used, the AND operator is used to join the clauses.
+<dl>
+<dd>
+
+**isAppEntitlementActive:** `Optional<Boolean>` — Whether app entitlement is active for this organization.
     
 </dd>
 </dl>
@@ -8124,7 +9243,7 @@ Values specified without quotes are matched using a case insensitive 'starts wit
 </dl>
 </details>
 
-<details><summary><code>client.logs.get(id) -> GetLogResponseContent</code></summary>
+<details><summary><code>client.organizations.getByName(name) -> GetOrganizationByNameResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -8136,7 +9255,7 @@ Values specified without quotes are matched using a case insensitive 'starts wit
 <dl>
 <dd>
 
-Retrieve an individual log event.
+Retrieve details about a single Organization specified by name.
 </dd>
 </dl>
 </dd>
@@ -8151,7 +9270,7 @@ Retrieve an individual log event.
 <dd>
 
 ```java
-client.logs().get("id");
+client.organizations().getByName("name");
 ```
 </dd>
 </dl>
@@ -8166,7 +9285,7 @@ client.logs().get("id");
 <dl>
 <dd>
 
-**id:** `String` — log_id of the log to retrieve.
+**name:** `String` — name of the organization to retrieve.
     
 </dd>
 </dl>
@@ -8178,8 +9297,7 @@ client.logs().get("id");
 </dl>
 </details>
 
-## NetworkAcls
-<details><summary><code>client.networkAcls.list() -> SyncPagingIterable&amp;lt;NetworkAclsResponseContent&amp;gt;</code></summary>
+<details><summary><code>client.organizations.get(id) -> GetOrganizationResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -8191,7 +9309,7 @@ client.logs().get("id");
 <dl>
 <dd>
 
-Get all access control list entries for your client.
+Retrieve details about a single Organization specified by ID.
 </dd>
 </dl>
 </dd>
@@ -8206,14 +9324,7 @@ Get all access control list entries for your client.
 <dd>
 
 ```java
-client.networkAcls().list(
-    ListNetworkAclsRequestParameters
-        .builder()
-        .page(1)
-        .perPage(1)
-        .includeTotals(true)
-        .build()
-);
+client.organizations().get("id");
 ```
 </dd>
 </dl>
@@ -8228,23 +9339,63 @@ client.networkAcls().list(
 <dl>
 <dd>
 
-**page:** `Optional<Integer>` — Use this field to request a specific page of the list results.
+**id:** `String` — ID of the organization to retrieve.
     
 </dd>
 </dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
 
+<details><summary><code>client.organizations.delete(id)</code></summary>
 <dl>
 <dd>
 
-**perPage:** `Optional<Integer>` — The amount of results per page.
-    
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Remove an Organization from your tenant.  This action cannot be undone. 
+
+**Note**: Members are automatically disassociated from an Organization when it is deleted. However, this action does **not** delete these users from your tenant.
 </dd>
 </dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
 
 <dl>
 <dd>
 
-**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+<dl>
+<dd>
+
+```java
+client.organizations().delete("id");
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` — Organization identifier.
     
 </dd>
 </dl>
@@ -8256,7 +9407,7 @@ client.networkAcls().list(
 </dl>
 </details>
 
-<details><summary><code>client.networkAcls.create(request)</code></summary>
+<details><summary><code>client.organizations.update(id, request) -> UpdateOrganizationResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -8268,7 +9419,7 @@ client.networkAcls().list(
 <dl>
 <dd>
 
-Create a new access control list for your client.
+Update the details of a specific [Organization](https://auth0.com/docs/manage-users/organizations/configure-organizations/create-organizations), such as name and display name, branding options, and metadata.
 </dd>
 </dl>
 </dd>
@@ -8283,22 +9434,10 @@ Create a new access control list for your client.
 <dd>
 
 ```java
-client.networkAcls().create(
-    CreateNetworkAclRequestContent
+client.organizations().update(
+    "id",
+    UpdateOrganizationRequestContent
         .builder()
-        .description("description")
-        .active(true)
-        .rule(
-            NetworkAclRule
-                .builder()
-                .action(
-                    NetworkAclAction
-                        .builder()
-                        .build()
-                )
-                .scope(NetworkAclRuleScopeEnum.MANAGEMENT)
-                .build()
-        )
         .build()
 );
 ```
@@ -8307,15 +9446,47 @@ client.networkAcls().create(
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` — ID of the organization to update.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**displayName:** `Optional<String>` — Friendly name of this organization.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**name:** `Optional<String>` — The name of this organization.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
+**branding:** `Optional<OrganizationBranding>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**description:** `String` 
+**metadata:** `Optional<Map<String, Optional<String>>>` 
     
 </dd>
 </dl>
@@ -8323,7 +9494,7 @@ client.networkAcls().create(
 <dl>
 <dd>
 
-**active:** `Boolean` — Indicates whether or not this access control list is actively being used
+**tokenQuota:** `Optional<UpdateTokenQuota>` 
     
 </dd>
 </dl>
@@ -8331,7 +9502,7 @@ client.networkAcls().create(
 <dl>
 <dd>
 
-**priority:** `Optional<Double>` — Indicates the order in which the ACL will be evaluated relative to other ACL rules.
+**thirdPartyClientAccess:** `Optional<OrganizationThirdPartyClientAccessEnum>` 
     
 </dd>
 </dl>
@@ -8339,7 +9510,7 @@ client.networkAcls().create(
 <dl>
 <dd>
 
-**rule:** `NetworkAclRule` 
+**isAppEntitlementActive:** `Optional<Boolean>` — Whether app entitlement is active for this organization.
     
 </dd>
 </dl>
@@ -8351,7 +9522,8 @@ client.networkAcls().create(
 </dl>
 </details>
 
-<details><summary><code>client.networkAcls.get(id) -> GetNetworkAclsResponseContent</code></summary>
+## Prompts
+<details><summary><code>client.prompts.getSettings() -> GetSettingsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -8363,7 +9535,7 @@ client.networkAcls().create(
 <dl>
 <dd>
 
-Get a specific access control list entry for your client.
+Retrieve details of the Universal Login configuration of your tenant. This includes the <a href="https://auth0.com/docs/authenticate/login/auth0-universal-login/identifier-first">Identifier First Authentication</a> and <a href="https://auth0.com/docs/secure/multi-factor-authentication/fido-authentication-with-webauthn/configure-webauthn-device-biometrics-for-mfa">WebAuthn with Device Biometrics for MFA</a> features.
 </dd>
 </dl>
 </dd>
@@ -8378,34 +9550,19 @@ Get a specific access control list entry for your client.
 <dd>
 
 ```java
-client.networkAcls().get("id");
+client.prompts().getSettings();
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**id:** `String` — The id of the access control list to retrieve.
-    
-</dd>
-</dl>
-</dd>
-</dl>
-
 
 </dd>
 </dl>
 </details>
 
-<details><summary><code>client.networkAcls.set(id, request) -> SetNetworkAclsResponseContent</code></summary>
+<details><summary><code>client.prompts.updateSettings(request) -> UpdateSettingsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -8417,7 +9574,7 @@ client.networkAcls().get("id");
 <dl>
 <dd>
 
-Update existing access control list for your client.
+Update the Universal Login configuration of your tenant. This includes the <a href="https://auth0.com/docs/authenticate/login/auth0-universal-login/identifier-first">Identifier First Authentication</a> and <a href="https://auth0.com/docs/secure/multi-factor-authentication/fido-authentication-with-webauthn/configure-webauthn-device-biometrics-for-mfa">WebAuthn with Device Biometrics for MFA</a> features.
 </dd>
 </dl>
 </dd>
@@ -8432,23 +9589,9 @@ Update existing access control list for your client.
 <dd>
 
 ```java
-client.networkAcls().set(
-    "id",
-    SetNetworkAclRequestContent
+client.prompts().updateSettings(
+    UpdateSettingsRequestContent
         .builder()
-        .description("description")
-        .active(true)
-        .rule(
-            NetworkAclRule
-                .builder()
-                .action(
-                    NetworkAclAction
-                        .builder()
-                        .build()
-                )
-                .scope(NetworkAclRuleScopeEnum.MANAGEMENT)
-                .build()
-        )
         .build()
 );
 ```
@@ -8465,23 +9608,7 @@ client.networkAcls().set(
 <dl>
 <dd>
 
-**id:** `String` — The id of the ACL to update.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**description:** `String` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**active:** `Boolean` — Indicates whether or not this access control list is actively being used
+**universalLoginExperience:** `Optional<UniversalLoginExperienceEnum>` 
     
 </dd>
 </dl>
@@ -8489,7 +9616,7 @@ client.networkAcls().set(
 <dl>
 <dd>
 
-**priority:** `Optional<Double>` — Indicates the order in which the ACL will be evaluated relative to other ACL rules.
+**identifierFirst:** `Optional<Boolean>` — Whether identifier first is enabled or not
     
 </dd>
 </dl>
@@ -8497,7 +9624,7 @@ client.networkAcls().set(
 <dl>
 <dd>
 
-**rule:** `NetworkAclRule` 
+**webauthnPlatformFirstFactor:** `Optional<Boolean>` — Use WebAuthn with Device Biometrics as the first authentication factor
     
 </dd>
 </dl>
@@ -8509,24 +9636,11 @@ client.networkAcls().set(
 </dl>
 </details>
 
-<details><summary><code>client.networkAcls.delete(id)</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
+## RateLimitPolicies
+<details><summary><code>client.rateLimitPolicies.list() -> SyncPagingIterable&amp;lt;RateLimitPolicy&amp;gt;</code></summary>
 <dl>
 <dd>
 
-Delete existing access control list for your client.
-</dd>
-</dl>
-</dd>
-</dl>
-
 #### 🔌 Usage
 
 <dl>
@@ -8536,7 +9650,16 @@ Delete existing access control list for your client.
 <dd>
 
 ```java
-client.networkAcls().delete("id");
+client.rateLimitPolicies().list(
+    ListRateLimitPoliciesRequestParameters
+        .builder()
+        .resource(RateLimitPolicyResourceEnum.OAUTH_AUTHENTICATION_API)
+        .consumer(RateLimitPolicyConsumerEnum.CLIENT)
+        .consumerSelector("consumer_selector")
+        .take(1)
+        .from("from")
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -8551,35 +9674,53 @@ client.networkAcls().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — The id of the ACL to delete
+**resource:** `Optional<RateLimitPolicyResourceEnum>` — The API protected by the Rate Limit Policy.
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
+**consumer:** `Optional<RateLimitPolicyConsumerEnum>` — The consumer to which the rate limit policy applies.
+    
 </dd>
 </dl>
-</details>
 
-<details><summary><code>client.networkAcls.update(id, request) -> UpdateNetworkAclResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+**consumerSelector:** `Optional<String>` — Identifier or category within the consumer to which the policy applies. Supported values: `client_id:<client_id>` to target a specific client by ID, `client_id:<cimd_uri>` to target a CIMD client by URI, `cimd_clients` to target all CIMD clients, `third_party_clients` to target all third-party clients, or `default` to apply the policy to any consumer identifier not otherwise explicitly targeted.
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-Update existing access control list for your client.
+**from:** `Optional<String>` — Cursor for pagination.
+    
+</dd>
+</dl>
 </dd>
 </dl>
+
+
 </dd>
 </dl>
+</details>
+
+<details><summary><code>client.rateLimitPolicies.create(request) -> CreateRateLimitPolicyResponseContent</code></summary>
+<dl>
+<dd>
 
 #### 🔌 Usage
 
@@ -8590,10 +9731,20 @@ Update existing access control list for your client.
 <dd>
 
 ```java
-client.networkAcls().update(
-    "id",
-    UpdateNetworkAclRequestContent
+client.rateLimitPolicies().create(
+    CreateRateLimitPolicyRequestContent
         .builder()
+        .resource(RateLimitPolicyResourceEnum.OAUTH_AUTHENTICATION_API)
+        .consumer(RateLimitPolicyConsumerEnum.CLIENT)
+        .consumerSelector("consumer_selector")
+        .configuration(
+            RateLimitPolicyConfiguration.of(
+                RateLimitPolicyConfigurationZero
+                    .builder()
+                    .action(RateLimitPolicyConfigurationZeroAction.ALLOW)
+                    .build()
+            )
+        )
         .build()
 );
 ```
@@ -8610,7 +9761,7 @@ client.networkAcls().update(
 <dl>
 <dd>
 
-**id:** `String` — The id of the ACL to update.
+**resource:** `RateLimitPolicyResourceEnum` 
     
 </dd>
 </dl>
@@ -8618,7 +9769,7 @@ client.networkAcls().update(
 <dl>
 <dd>
 
-**description:** `Optional<String>` 
+**consumer:** `RateLimitPolicyConsumerEnum` 
     
 </dd>
 </dl>
@@ -8626,7 +9777,7 @@ client.networkAcls().update(
 <dl>
 <dd>
 
-**active:** `Optional<Boolean>` — Indicates whether or not this access control list is actively being used
+**consumerSelector:** `String` — Identifier or category within the consumer to which the policy applies. Supported values: `client_id:<client_id>` to target a specific client by ID, `client_id:<cimd_uri>` to target a CIMD client by URI, `cimd_clients` to target all CIMD clients, `third_party_clients` to target all third-party clients, or `default` to apply the policy to any consumer identifier not otherwise explicitly targeted.
     
 </dd>
 </dl>
@@ -8634,15 +9785,47 @@ client.networkAcls().update(
 <dl>
 <dd>
 
-**priority:** `Optional<Double>` — Indicates the order in which the ACL will be evaluated relative to other ACL rules.
+**configuration:** `RateLimitPolicyConfiguration` 
     
 </dd>
 </dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.rateLimitPolicies.get(id) -> GetRateLimitPolicyResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 🔌 Usage
 
 <dl>
 <dd>
 
-**rule:** `Optional<NetworkAclRule>` 
+<dl>
+<dd>
+
+```java
+client.rateLimitPolicies().get("id");
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` — Unique identifier for the Rate Limit Policy.
     
 </dd>
 </dl>
@@ -8654,12 +9837,11 @@ client.networkAcls().update(
 </dl>
 </details>
 
-## Organizations
-<details><summary><code>client.organizations.list() -> SyncPagingIterable&amp;lt;Organization&amp;gt;</code></summary>
+<details><summary><code>client.rateLimitPolicies.delete(id)</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -8667,27 +9849,37 @@ client.networkAcls().update(
 <dl>
 <dd>
 
-Retrieve detailed list of all Organizations available in your tenant. For more information, see Auth0 Organizations.
-
-This endpoint supports two types of pagination:
-
-- Offset pagination
-- Checkpoint pagination
-
-Checkpoint pagination must be used if you need to retrieve more than 1000 organizations.
+```java
+client.rateLimitPolicies().delete("id");
+```
+</dd>
+</dl>
+</dd>
+</dl>
 
-**Checkpoint Pagination**
+#### ⚙️ Parameters
 
-To search by checkpoint, use the following parameters:
+<dl>
+<dd>
 
-- `from`: Optional id from which to start selection.
-- `take`: The total number of entries to retrieve when using the `from` parameter. Defaults to 50.
+<dl>
+<dd>
 
-**Note**: The first time you call this endpoint using checkpoint pagination, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no pages are remaining.
+**id:** `String` — Unique identifier for the Rate Limit Policy.
+    
+</dd>
+</dl>
 </dd>
 </dl>
+
+
 </dd>
 </dl>
+</details>
+
+<details><summary><code>client.rateLimitPolicies.update(id, request) -> UpdateRateLimitPolicyResponseContent</code></summary>
+<dl>
+<dd>
 
 #### 🔌 Usage
 
@@ -8698,12 +9890,18 @@ To search by checkpoint, use the following parameters:
 <dd>
 
 ```java
-client.organizations().list(
-    ListOrganizationsRequestParameters
+client.rateLimitPolicies().update(
+    "id",
+    PatchRateLimitPolicyRequestContent
         .builder()
-        .from("from")
-        .take(1)
-        .sort("sort")
+        .configuration(
+            PatchRateLimitPolicyConfigurationRequestContent.of(
+                PatchRateLimitPolicyConfigurationRequestContentZero
+                    .builder()
+                    .action(PatchRateLimitPolicyConfigurationRequestContentZeroAction.ALLOW)
+                    .build()
+            )
+        )
         .build()
 );
 ```
@@ -8720,15 +9918,7 @@ client.organizations().list(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Optional Id from which to start selection.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+**id:** `String` — Unique identifier for the Rate Limit Policy.
     
 </dd>
 </dl>
@@ -8736,7 +9926,7 @@ client.organizations().list(
 <dl>
 <dd>
 
-**sort:** `Optional<String>` — Field to sort by. Use <code>field:order</code> where order is <code>1</code> for ascending and <code>-1</code> for descending. e.g. <code>created_at:1</code>. We currently support sorting by the following fields: <code>name</code>, <code>display_name</code> and <code>created_at</code>.
+**configuration:** `PatchRateLimitPolicyConfigurationRequestContent` 
     
 </dd>
 </dl>
@@ -8748,7 +9938,8 @@ client.organizations().list(
 </dl>
 </details>
 
-<details><summary><code>client.organizations.create(request) -> CreateOrganizationResponseContent</code></summary>
+## RefreshTokens
+<details><summary><code>client.refreshTokens.list() -> SyncPagingIterable&amp;lt;RefreshTokenResponseContent&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -8760,7 +9951,7 @@ client.organizations().list(
 <dl>
 <dd>
 
-Create a new Organization within your tenant.  To learn more about Organization settings, behavior, and configuration options, review [Create Your First Organization](https://auth0.com/docs/manage-users/organizations/create-first-organization).
+Retrieve a paginated list of refresh tokens for a specific user, with optional filtering by client ID. Results are sorted by credential_id ascending.
 </dd>
 </dl>
 </dd>
@@ -8775,10 +9966,15 @@ Create a new Organization within your tenant.  To learn more about Organization
 <dd>
 
 ```java
-client.organizations().create(
-    CreateOrganizationRequestContent
+client.refreshTokens().list(
+    GetRefreshTokensRequestParameters
         .builder()
-        .name("name")
+        .userId("user_id")
+        .clientId("client_id")
+        .from("from")
+        .take(1)
+        .fields("fields")
+        .includeFields(true)
         .build()
 );
 ```
@@ -8795,15 +9991,7 @@ client.organizations().create(
 <dl>
 <dd>
 
-**name:** `String` — The name of this organization.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**displayName:** `Optional<String>` — Friendly name of this organization.
+**userId:** `String` — ID of the user whose refresh tokens to retrieve. Required.
     
 </dd>
 </dl>
@@ -8811,7 +9999,7 @@ client.organizations().create(
 <dl>
 <dd>
 
-**branding:** `Optional<OrganizationBranding>` 
+**clientId:** `Optional<String>` — Filter results by client ID. Only valid when user_id is provided.
     
 </dd>
 </dl>
@@ -8819,7 +10007,7 @@ client.organizations().create(
 <dl>
 <dd>
 
-**metadata:** `Optional<Map<String, Optional<String>>>` 
+**from:** `Optional<String>` — An opaque cursor from which to start the selection (exclusive). Expires after 24 hours. Obtained from the next property of a previous response.
     
 </dd>
 </dl>
@@ -8827,7 +10015,7 @@ client.organizations().create(
 <dl>
 <dd>
 
-**enabledConnections:** `Optional<List<ConnectionForOrganization>>` — Connections that will be enabled for this organization. See POST enabled_connections endpoint for the object format. (Max of 10 connections allowed)
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
     
 </dd>
 </dl>
@@ -8835,7 +10023,7 @@ client.organizations().create(
 <dl>
 <dd>
 
-**tokenQuota:** `Optional<CreateTokenQuota>` 
+**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
     
 </dd>
 </dl>
@@ -8843,7 +10031,7 @@ client.organizations().create(
 <dl>
 <dd>
 
-**thirdPartyClientAccess:** `Optional<OrganizationThirdPartyClientAccessEnum>` 
+**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
     
 </dd>
 </dl>
@@ -8855,7 +10043,7 @@ client.organizations().create(
 </dl>
 </details>
 
-<details><summary><code>client.organizations.getByName(name) -> GetOrganizationByNameResponseContent</code></summary>
+<details><summary><code>client.refreshTokens.revoke(request)</code></summary>
 <dl>
 <dd>
 
@@ -8867,7 +10055,7 @@ client.organizations().create(
 <dl>
 <dd>
 
-Retrieve details about a single Organization specified by name.
+Revoke refresh tokens in bulk by ID list, user, user+client, or user+client+audience.
 </dd>
 </dl>
 </dd>
@@ -8882,7 +10070,11 @@ Retrieve details about a single Organization specified by name.
 <dd>
 
 ```java
-client.organizations().getByName("name");
+client.refreshTokens().revoke(
+    RevokeRefreshTokensRequestContent
+        .builder()
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -8897,7 +10089,31 @@ client.organizations().getByName("name");
 <dl>
 <dd>
 
-**name:** `String` — name of the organization to retrieve.
+**ids:** `Optional<List<String>>` — Array of refresh token IDs to revoke. Limited to 100 at a time.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**userId:** `Optional<String>` — Revoke all refresh tokens for this user.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**clientId:** `Optional<String>` — Revoke refresh tokens for this client. Must be paired with `user_id`; optionally narrowed further with `audience`.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**audience:** `Optional<String>` — Resource server identifier (audience) to scope the revocation. Must be used with both `user_id` and `client_id`.
     
 </dd>
 </dl>
@@ -8909,7 +10125,7 @@ client.organizations().getByName("name");
 </dl>
 </details>
 
-<details><summary><code>client.organizations.get(id) -> GetOrganizationResponseContent</code></summary>
+<details><summary><code>client.refreshTokens.get(id) -> GetRefreshTokenResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -8921,7 +10137,7 @@ client.organizations().getByName("name");
 <dl>
 <dd>
 
-Retrieve details about a single Organization specified by ID.
+Retrieve refresh token information.
 </dd>
 </dl>
 </dd>
@@ -8936,7 +10152,7 @@ Retrieve details about a single Organization specified by ID.
 <dd>
 
 ```java
-client.organizations().get("id");
+client.refreshTokens().get("id");
 ```
 </dd>
 </dl>
@@ -8951,7 +10167,7 @@ client.organizations().get("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the organization to retrieve.
+**id:** `String` — ID refresh token to retrieve
     
 </dd>
 </dl>
@@ -8963,7 +10179,7 @@ client.organizations().get("id");
 </dl>
 </details>
 
-<details><summary><code>client.organizations.delete(id)</code></summary>
+<details><summary><code>client.refreshTokens.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -8975,9 +10191,7 @@ client.organizations().get("id");
 <dl>
 <dd>
 
-Remove an Organization from your tenant.  This action cannot be undone. 
-
-**Note**: Members are automatically disassociated from an Organization when it is deleted. However, this action does **not** delete these users from your tenant.
+Delete a refresh token by its ID.
 </dd>
 </dl>
 </dd>
@@ -8992,7 +10206,7 @@ Remove an Organization from your tenant.  This action cannot be undone.
 <dd>
 
 ```java
-client.organizations().delete("id");
+client.refreshTokens().delete("id");
 ```
 </dd>
 </dl>
@@ -9007,7 +10221,7 @@ client.organizations().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — Organization identifier.
+**id:** `String` — ID of the refresh token to delete.
     
 </dd>
 </dl>
@@ -9019,7 +10233,7 @@ client.organizations().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.organizations.update(id, request) -> UpdateOrganizationResponseContent</code></summary>
+<details><summary><code>client.refreshTokens.update(id, request) -> UpdateRefreshTokenResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -9031,7 +10245,7 @@ client.organizations().delete("id");
 <dl>
 <dd>
 
-Update the details of a specific [Organization](https://auth0.com/docs/manage-users/organizations/configure-organizations/create-organizations), such as name and display name, branding options, and metadata.
+Update a refresh token by its ID.
 </dd>
 </dl>
 </dd>
@@ -9046,9 +10260,9 @@ Update the details of a specific [Organization](https://auth0.com/docs/manage-us
 <dd>
 
 ```java
-client.organizations().update(
+client.refreshTokens().update(
     "id",
-    UpdateOrganizationRequestContent
+    UpdateRefreshTokenRequestContent
         .builder()
         .build()
 );
@@ -9066,47 +10280,7 @@ client.organizations().update(
 <dl>
 <dd>
 
-**id:** `String` — ID of the organization to update.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**displayName:** `Optional<String>` — Friendly name of this organization.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**name:** `Optional<String>` — The name of this organization.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**branding:** `Optional<OrganizationBranding>` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**metadata:** `Optional<Map<String, Optional<String>>>` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**tokenQuota:** `Optional<UpdateTokenQuota>` 
+**id:** `String` — ID of the refresh token to update.
     
 </dd>
 </dl>
@@ -9114,7 +10288,7 @@ client.organizations().update(
 <dl>
 <dd>
 
-**thirdPartyClientAccess:** `Optional<OrganizationThirdPartyClientAccessEnum>` 
+**refreshTokenMetadata:** `Optional<Map<String, Object>>` — Metadata associated with the refresh token. Pass null or {} to remove all metadata.
     
 </dd>
 </dl>
@@ -9126,8 +10300,8 @@ client.organizations().update(
 </dl>
 </details>
 
-## Prompts
-<details><summary><code>client.prompts.getSettings() -> GetSettingsResponseContent</code></summary>
+## ResourceServers
+<details><summary><code>client.resourceServers.list() -> SyncPagingIterable&amp;lt;ResourceServer&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -9139,7 +10313,7 @@ client.organizations().update(
 <dl>
 <dd>
 
-Retrieve details of the Universal Login configuration of your tenant. This includes the <a href="https://auth0.com/docs/authenticate/login/auth0-universal-login/identifier-first">Identifier First Authentication</a> and <a href="https://auth0.com/docs/secure/multi-factor-authentication/fido-authentication-with-webauthn/configure-webauthn-device-biometrics-for-mfa">WebAuthn with Device Biometrics for MFA</a> features.
+Retrieve details of all APIs associated with your tenant.
 </dd>
 </dl>
 </dd>
@@ -9154,23 +10328,25 @@ Retrieve details of the Universal Login configuration of your tenant. This inclu
 <dd>
 
 ```java
-client.prompts().getSettings();
+client.resourceServers().list(
+    ListResourceServerRequestParameters
+        .builder()
+        .page(1)
+        .perPage(1)
+        .includeTotals(true)
+        .includeFields(true)
+        .identifiers(
+            Arrays.asList("identifiers")
+        )
+        .build()
+);
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.prompts.updateSettings(request) -> UpdateSettingsResponseContent</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -9178,41 +10354,23 @@ client.prompts().getSettings();
 <dl>
 <dd>
 
-Update the Universal Login configuration of your tenant. This includes the <a href="https://auth0.com/docs/authenticate/login/auth0-universal-login/identifier-first">Identifier First Authentication</a> and <a href="https://auth0.com/docs/secure/multi-factor-authentication/fido-authentication-with-webauthn/configure-webauthn-device-biometrics-for-mfa">WebAuthn with Device Biometrics for MFA</a> features.
-</dd>
-</dl>
+**identifiers:** `Optional<String>` — An optional filter on the resource server identifier. Must be URL encoded and may be specified multiple times (max 10).<br /><b>e.g.</b> <i>../resource-servers?identifiers=id1&identifiers=id2</i>
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-```java
-client.prompts().updateSettings(
-    UpdateSettingsRequestContent
-        .builder()
-        .build()
-);
-```
-</dd>
-</dl>
+**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-**universalLoginExperience:** `Optional<UniversalLoginExperienceEnum>` 
+**perPage:** `Optional<Integer>` — Number of results per page.
     
 </dd>
 </dl>
@@ -9220,7 +10378,7 @@ client.prompts().updateSettings(
 <dl>
 <dd>
 
-**identifierFirst:** `Optional<Boolean>` — Whether identifier first is enabled or not
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
     
 </dd>
 </dl>
@@ -9228,7 +10386,7 @@ client.prompts().updateSettings(
 <dl>
 <dd>
 
-**webauthnPlatformFirstFactor:** `Optional<Boolean>` — Use WebAuthn with Device Biometrics as the first authentication factor
+**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
     
 </dd>
 </dl>
@@ -9240,11 +10398,24 @@ client.prompts().updateSettings(
 </dl>
 </details>
 
-## RateLimitPolicies
-<details><summary><code>client.rateLimitPolicies.list() -> SyncPagingIterable&amp;lt;RateLimitPolicy&amp;gt;</code></summary>
+<details><summary><code>client.resourceServers.create(request) -> CreateResourceServerResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
 <dl>
 <dd>
 
+Create a new API associated with your tenant. Note that all new APIs must be registered with Auth0. For more information, read <a href="https://www.auth0.com/docs/get-started/apis"> APIs</a>.
+</dd>
+</dl>
+</dd>
+</dl>
+
 #### 🔌 Usage
 
 <dl>
@@ -9254,14 +10425,10 @@ client.prompts().updateSettings(
 <dd>
 
 ```java
-client.rateLimitPolicies().list(
-    ListRateLimitPoliciesRequestParameters
+client.resourceServers().create(
+    CreateResourceServerRequestContent
         .builder()
-        .resource(RateLimitPolicyResourceEnum.OAUTH_AUTHENTICATION_API)
-        .consumer(RateLimitPolicyConsumerEnum.CLIENT)
-        .consumerSelector("consumer_selector")
-        .take(1)
-        .from("from")
+        .identifier("identifier")
         .build()
 );
 ```
@@ -9278,7 +10445,23 @@ client.rateLimitPolicies().list(
 <dl>
 <dd>
 
-**resource:** `Optional<RateLimitPolicyResourceEnum>` — The API protected by the Rate Limit Policy.
+**name:** `Optional<String>` — Friendly name for this resource server. Can not contain `<` or `>` characters.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**identifier:** `String` — Unique identifier for the API used as the audience parameter on authorization calls. Can not be changed once set.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**scopes:** `Optional<List<ResourceServerScope>>` — List of permissions (scopes) that this API uses.
     
 </dd>
 </dl>
@@ -9286,7 +10469,7 @@ client.rateLimitPolicies().list(
 <dl>
 <dd>
 
-**consumer:** `Optional<RateLimitPolicyConsumerEnum>` — The consumer to which the rate limit policy applies.
+**signingAlg:** `Optional<SigningAlgorithmEnum>` 
     
 </dd>
 </dl>
@@ -9294,7 +10477,7 @@ client.rateLimitPolicies().list(
 <dl>
 <dd>
 
-**consumerSelector:** `Optional<String>` — Identifier or category within the consumer to which the policy applies. Supported values: `client_id:<client_id>` to target a specific client by ID, `client_id:<cimd_uri>` to target a CIMD client by URI, `cimd_clients` to target all CIMD clients, `third_party_clients` to target all third-party clients, or `default` to apply the policy to any consumer identifier not otherwise explicitly targeted.
+**signingSecret:** `Optional<String>` — Secret used to sign tokens when using symmetric algorithms (HS256).
     
 </dd>
 </dl>
@@ -9302,7 +10485,7 @@ client.rateLimitPolicies().list(
 <dl>
 <dd>
 
-**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+**allowOfflineAccess:** `Optional<Boolean>` — Whether refresh tokens can be issued for this API (true) or not (false).
     
 </dd>
 </dl>
@@ -9310,62 +10493,71 @@ client.rateLimitPolicies().list(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Cursor for pagination.
+**allowOnlineAccess:** `Optional<Boolean>` — Whether Online Refresh Tokens can be issued for this API (true) or not (false).
     
 </dd>
 </dl>
+
+<dl>
+<dd>
+
+**allowOnlineAccessWithEphemeralSessions:** `Optional<Boolean>` — Whether Online Refresh Tokens can be issued even when sessions are configured as ephemeral (true) or not (false).
+    
 </dd>
 </dl>
 
+<dl>
+<dd>
 
+**tokenLifetime:** `Optional<Integer>` — Expiration value (in seconds) for access tokens issued for this API from the token endpoint.
+    
 </dd>
 </dl>
-</details>
 
-<details><summary><code>client.rateLimitPolicies.create(request) -> CreateRateLimitPolicyResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 🔌 Usage
+**tokenDialect:** `Optional<ResourceServerTokenDialectSchemaEnum>` 
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**skipConsentForVerifiableFirstPartyClients:** `Optional<Boolean>` — Whether to skip user consent for applications flagged as first party (true) or not (false).
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-```java
-client.rateLimitPolicies().create(
-    CreateRateLimitPolicyRequestContent
-        .builder()
-        .resource(RateLimitPolicyResourceEnum.OAUTH_AUTHENTICATION_API)
-        .consumer(RateLimitPolicyConsumerEnum.CLIENT)
-        .consumerSelector("consumer_selector")
-        .configuration(
-            RateLimitPolicyConfiguration.of(
-                RateLimitPolicyConfigurationZero
-                    .builder()
-                    .action(RateLimitPolicyConfigurationZeroAction.ALLOW)
-                    .build()
-            )
-        )
-        .build()
-);
-```
+**enforcePolicies:** `Optional<Boolean>` — Whether to enforce authorization policies (true) or to ignore them (false).
+    
 </dd>
 </dl>
+
+<dl>
+<dd>
+
+**tokenEncryption:** `Optional<ResourceServerTokenEncryption>` 
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**consentPolicy:** `Optional<ResourceServerConsentPolicyEnum>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**resource:** `RateLimitPolicyResourceEnum` 
+**authorizationDetails:** `Optional<List<Object>>` 
     
 </dd>
 </dl>
@@ -9373,7 +10565,7 @@ client.rateLimitPolicies().create(
 <dl>
 <dd>
 
-**consumer:** `RateLimitPolicyConsumerEnum` 
+**proofOfPossession:** `Optional<ResourceServerProofOfPossession>` 
     
 </dd>
 </dl>
@@ -9381,7 +10573,7 @@ client.rateLimitPolicies().create(
 <dl>
 <dd>
 
-**consumerSelector:** `String` — Identifier or category within the consumer to which the policy applies. Supported values: `client_id:<client_id>` to target a specific client by ID, `client_id:<cimd_uri>` to target a CIMD client by URI, `cimd_clients` to target all CIMD clients, `third_party_clients` to target all third-party clients, or `default` to apply the policy to any consumer identifier not otherwise explicitly targeted.
+**subjectTypeAuthorization:** `Optional<ResourceServerSubjectTypeAuthorization>` 
     
 </dd>
 </dl>
@@ -9389,7 +10581,7 @@ client.rateLimitPolicies().create(
 <dl>
 <dd>
 
-**configuration:** `RateLimitPolicyConfiguration` 
+**authorizationPolicy:** `Optional<ResourceServerAuthorizationPolicy>` 
     
 </dd>
 </dl>
@@ -9401,11 +10593,11 @@ client.rateLimitPolicies().create(
 </dl>
 </details>
 
-<details><summary><code>client.rateLimitPolicies.get(id) -> GetRateLimitPolicyResponseContent</code></summary>
+<details><summary><code>client.resourceServers.get(id) -> GetResourceServerResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 🔌 Usage
+#### 📝 Description
 
 <dl>
 <dd>
@@ -9413,15 +10605,13 @@ client.rateLimitPolicies().create(
 <dl>
 <dd>
 
-```java
-client.rateLimitPolicies().get("id");
-```
+Retrieve <a href="https://auth0.com/docs/apis">API</a> details with the given ID.
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -9429,23 +10619,21 @@ client.rateLimitPolicies().get("id");
 <dl>
 <dd>
 
-**id:** `String` — Unique identifier for the Rate Limit Policy.
-    
-</dd>
-</dl>
+```java
+client.resourceServers().get(
+    "id",
+    GetResourceServerRequestParameters
+        .builder()
+        .includeFields(true)
+        .build()
+);
+```
 </dd>
 </dl>
-
-
 </dd>
 </dl>
-</details>
-
-<details><summary><code>client.rateLimitPolicies.delete(id)</code></summary>
-<dl>
-<dd>
 
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -9453,23 +10641,15 @@ client.rateLimitPolicies().get("id");
 <dl>
 <dd>
 
-```java
-client.rateLimitPolicies().delete("id");
-```
-</dd>
-</dl>
+**id:** `String` — ID or audience of the resource server to retrieve.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
-<dl>
-<dd>
-
-**id:** `String` — Unique identifier for the Rate Limit Policy.
+**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
     
 </dd>
 </dl>
@@ -9481,11 +10661,11 @@ client.rateLimitPolicies().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.rateLimitPolicies.update(id, request) -> UpdateRateLimitPolicyResponseContent</code></summary>
+<details><summary><code>client.resourceServers.delete(id)</code></summary>
 <dl>
 <dd>
 
-#### 🔌 Usage
+#### 📝 Description
 
 <dl>
 <dd>
@@ -9493,28 +10673,13 @@ client.rateLimitPolicies().delete("id");
 <dl>
 <dd>
 
-```java
-client.rateLimitPolicies().update(
-    "id",
-    PatchRateLimitPolicyRequestContent
-        .builder()
-        .configuration(
-            PatchRateLimitPolicyConfigurationRequestContent.of(
-                PatchRateLimitPolicyConfigurationRequestContentZero
-                    .builder()
-                    .action(PatchRateLimitPolicyConfigurationRequestContentZeroAction.ALLOW)
-                    .build()
-            )
-        )
-        .build()
-);
-```
+Delete an existing API by ID. For more information, read <a href="https://www.auth0.com/docs/get-started/apis/api-settings">API Settings</a>.
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -9522,15 +10687,23 @@ client.rateLimitPolicies().update(
 <dl>
 <dd>
 
-**id:** `String` — Unique identifier for the Rate Limit Policy.
-    
+```java
+client.resourceServers().delete("id");
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**configuration:** `PatchRateLimitPolicyConfigurationRequestContent` 
+<dl>
+<dd>
+
+**id:** `String` — ID or the audience of the resource server to delete.
     
 </dd>
 </dl>
@@ -9542,8 +10715,7 @@ client.rateLimitPolicies().update(
 </dl>
 </details>
 
-## RefreshTokens
-<details><summary><code>client.refreshTokens.list() -> SyncPagingIterable&amp;lt;RefreshTokenResponseContent&amp;gt;</code></summary>
+<details><summary><code>client.resourceServers.update(id, request) -> UpdateResourceServerResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -9555,7 +10727,7 @@ client.rateLimitPolicies().update(
 <dl>
 <dd>
 
-Retrieve a paginated list of refresh tokens for a specific user, with optional filtering by client ID. Results are sorted by credential_id ascending.
+Change an existing API setting by resource server ID. For more information, read <a href="https://www.auth0.com/docs/get-started/apis/api-settings">API Settings</a>.
 </dd>
 </dl>
 </dd>
@@ -9570,15 +10742,10 @@ Retrieve a paginated list of refresh tokens for a specific user, with optional f
 <dd>
 
 ```java
-client.refreshTokens().list(
-    GetRefreshTokensRequestParameters
+client.resourceServers().update(
+    "id",
+    UpdateResourceServerRequestContent
         .builder()
-        .userId("user_id")
-        .clientId("client_id")
-        .from("from")
-        .take(1)
-        .fields("fields")
-        .includeFields(true)
         .build()
 );
 ```
@@ -9595,7 +10762,7 @@ client.refreshTokens().list(
 <dl>
 <dd>
 
-**userId:** `String` — ID of the user whose refresh tokens to retrieve. Required.
+**id:** `String` — ID or audience of the resource server to update.
     
 </dd>
 </dl>
@@ -9603,7 +10770,7 @@ client.refreshTokens().list(
 <dl>
 <dd>
 
-**clientId:** `Optional<String>` — Filter results by client ID. Only valid when user_id is provided.
+**name:** `Optional<String>` — Friendly name for this resource server. Can not contain `<` or `>` characters.
     
 </dd>
 </dl>
@@ -9611,7 +10778,7 @@ client.refreshTokens().list(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — An opaque cursor from which to start the selection (exclusive). Expires after 24 hours. Obtained from the next property of a previous response.
+**scopes:** `Optional<List<ResourceServerScope>>` — List of permissions (scopes) that this API uses.
     
 </dd>
 </dl>
@@ -9619,7 +10786,7 @@ client.refreshTokens().list(
 <dl>
 <dd>
 
-**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+**signingAlg:** `Optional<SigningAlgorithmEnum>` 
     
 </dd>
 </dl>
@@ -9627,7 +10794,7 @@ client.refreshTokens().list(
 <dl>
 <dd>
 
-**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
+**signingSecret:** `Optional<String>` — Secret used to sign tokens when using symmetric algorithms (HS256).
     
 </dd>
 </dl>
@@ -9635,65 +10802,31 @@ client.refreshTokens().list(
 <dl>
 <dd>
 
-**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
+**skipConsentForVerifiableFirstPartyClients:** `Optional<Boolean>` — Whether to skip user consent for applications flagged as first party (true) or not (false).
     
 </dd>
 </dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.refreshTokens.revoke(request)</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
 
 <dl>
 <dd>
 
-Revoke refresh tokens in bulk by ID list, user, user+client, or user+client+audience.
-</dd>
-</dl>
+**allowOfflineAccess:** `Optional<Boolean>` — Whether refresh tokens can be issued for this API (true) or not (false).
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-```java
-client.refreshTokens().revoke(
-    RevokeRefreshTokensRequestContent
-        .builder()
-        .build()
-);
-```
-</dd>
-</dl>
+**allowOnlineAccess:** `Optional<Boolean>` — Whether Online Refresh Tokens can be issued for this API (true) or not (false).
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-**ids:** `Optional<List<String>>` — Array of refresh token IDs to revoke. Limited to 100 at a time.
+**allowOnlineAccessWithEphemeralSessions:** `Optional<Boolean>` — Whether Online Refresh Tokens can be issued even when sessions are configured as ephemeral (true) or not (false).
     
 </dd>
 </dl>
@@ -9701,7 +10834,7 @@ client.refreshTokens().revoke(
 <dl>
 <dd>
 
-**userId:** `Optional<String>` — Revoke all refresh tokens for this user.
+**tokenLifetime:** `Optional<Integer>` — Expiration value (in seconds) for access tokens issued for this API from the token endpoint.
     
 </dd>
 </dl>
@@ -9709,7 +10842,7 @@ client.refreshTokens().revoke(
 <dl>
 <dd>
 
-**clientId:** `Optional<String>` — Revoke refresh tokens for this client. Must be paired with `user_id`; optionally narrowed further with `audience`.
+**tokenDialect:** `Optional<ResourceServerTokenDialectSchemaEnum>` 
     
 </dd>
 </dl>
@@ -9717,61 +10850,55 @@ client.refreshTokens().revoke(
 <dl>
 <dd>
 
-**audience:** `Optional<String>` — Resource server identifier (audience) to scope the revocation. Must be used with both `user_id` and `client_id`.
+**enforcePolicies:** `Optional<Boolean>` — Whether authorization policies are enforced (true) or not enforced (false).
     
 </dd>
 </dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.refreshTokens.get(id) -> GetRefreshTokenResponseContent</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
 
 <dl>
 <dd>
 
-Retrieve refresh token information.
-</dd>
-</dl>
+**tokenEncryption:** `Optional<ResourceServerTokenEncryption>` 
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
+**consentPolicy:** `Optional<ResourceServerConsentPolicyEnum>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-```java
-client.refreshTokens().get("id");
-```
+**authorizationDetails:** `Optional<List<Object>>` 
+    
 </dd>
 </dl>
+
+<dl>
+<dd>
+
+**proofOfPossession:** `Optional<ResourceServerProofOfPossession>` 
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**subjectTypeAuthorization:** `Optional<ResourceServerSubjectTypeAuthorization>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**id:** `String` — ID refresh token to retrieve
+**authorizationPolicy:** `Optional<ResourceServerAuthorizationPolicy>` 
     
 </dd>
 </dl>
@@ -9783,7 +10910,8 @@ client.refreshTokens().get("id");
 </dl>
 </details>
 
-<details><summary><code>client.refreshTokens.delete(id)</code></summary>
+## Roles
+<details><summary><code>client.roles.list() -> SyncPagingIterable&amp;lt;Role&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -9795,7 +10923,9 @@ client.refreshTokens().get("id");
 <dl>
 <dd>
 
-Delete a refresh token by its ID.
+Retrieve detailed list of user roles created in your tenant.
+
+**Note**: The returned list does not include standard roles available for tenant members, such as Admin or Support Access.
 </dd>
 </dl>
 </dd>
@@ -9810,7 +10940,17 @@ Delete a refresh token by its ID.
 <dd>
 
 ```java
-client.refreshTokens().delete("id");
+client.roles().list(
+    ListRolesRequestParameters
+        .builder()
+        .perPage(1)
+        .page(1)
+        .includeTotals(true)
+        .nameFilter("name_filter")
+        .type(RoleTypeEnum.TENANT)
+        .ownerId("owner_id")
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -9825,66 +10965,39 @@ client.refreshTokens().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the refresh token to delete.
+**perPage:** `Optional<Integer>` — Number of results per page. Defaults to 50.
     
 </dd>
 </dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
 
-<details><summary><code>client.refreshTokens.update(id, request) -> UpdateRefreshTokenResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
-
-<dl>
-<dd>
+**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
-Update a refresh token by its ID.
-</dd>
-</dl>
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-```java
-client.refreshTokens().update(
-    "id",
-    UpdateRefreshTokenRequestContent
-        .builder()
-        .build()
-);
-```
-</dd>
-</dl>
+**nameFilter:** `Optional<String>` — Optional filter on name (case-insensitive).
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-**id:** `String` — ID of the refresh token to update.
+**type:** `Optional<RoleTypeEnum>` — Optional filter on the type of the role
     
 </dd>
 </dl>
@@ -9892,7 +11005,7 @@ client.refreshTokens().update(
 <dl>
 <dd>
 
-**refreshTokenMetadata:** `Optional<Map<String, Object>>` — Metadata associated with the refresh token. Pass null or {} to remove all metadata.
+**ownerId:** `Optional<String>` — Filter organization-level roles by owner ID. Required when type is "organization".
     
 </dd>
 </dl>
@@ -9904,8 +11017,7 @@ client.refreshTokens().update(
 </dl>
 </details>
 
-## ResourceServers
-<details><summary><code>client.resourceServers.list() -> SyncPagingIterable&amp;lt;ResourceServer&amp;gt;</code></summary>
+<details><summary><code>client.roles.create(request) -> CreateRoleResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -9917,7 +11029,9 @@ client.refreshTokens().update(
 <dl>
 <dd>
 
-Retrieve details of all APIs associated with your tenant.
+Create a user role for [Role-Based Access Control](https://auth0.com/docs/manage-users/access-control/rbac).
+
+**Note**: New roles are not associated with any permissions by default. To assign existing permissions to your role, review Associate Permissions with a Role. To create new permissions, review Add API Permissions.
 </dd>
 </dl>
 </dd>
@@ -9932,16 +11046,10 @@ Retrieve details of all APIs associated with your tenant.
 <dd>
 
 ```java
-client.resourceServers().list(
-    ListResourceServerRequestParameters
+client.roles().create(
+    CreateRoleRequestContent
         .builder()
-        .page(1)
-        .perPage(1)
-        .includeTotals(true)
-        .includeFields(true)
-        .identifiers(
-            Arrays.asList("identifiers")
-        )
+        .name("name")
         .build()
 );
 ```
@@ -9958,15 +11066,7 @@ client.resourceServers().list(
 <dl>
 <dd>
 
-**identifiers:** `Optional<String>` — An optional filter on the resource server identifier. Must be URL encoded and may be specified multiple times (max 10).<br /><b>e.g.</b> <i>../resource-servers?identifiers=id1&identifiers=id2</i>
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
+**name:** `String` — Name of the role.
     
 </dd>
 </dl>
@@ -9974,7 +11074,7 @@ client.resourceServers().list(
 <dl>
 <dd>
 
-**perPage:** `Optional<Integer>` — Number of results per page.
+**description:** `Optional<String>` — Description of the role.
     
 </dd>
 </dl>
@@ -9982,7 +11082,7 @@ client.resourceServers().list(
 <dl>
 <dd>
 
-**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+**type:** `Optional<RoleTypeEnum>` — The type of the role. Defaults to tenant.
     
 </dd>
 </dl>
@@ -9990,7 +11090,7 @@ client.resourceServers().list(
 <dl>
 <dd>
 
-**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
+**ownerId:** `Optional<String>` — The ID of the organization that owns this role. Required when type is "organization".
     
 </dd>
 </dl>
@@ -10002,7 +11102,7 @@ client.resourceServers().list(
 </dl>
 </details>
 
-<details><summary><code>client.resourceServers.create(request) -> CreateResourceServerResponseContent</code></summary>
+<details><summary><code>client.roles.get(id) -> GetRoleResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -10014,7 +11114,7 @@ client.resourceServers().list(
 <dl>
 <dd>
 
-Create a new API associated with your tenant. Note that all new APIs must be registered with Auth0. For more information, read <a href="https://www.auth0.com/docs/get-started/apis"> APIs</a>.
+Retrieve details about a specific [user role](https://auth0.com/docs/manage-users/access-control/rbac) specified by ID.
 </dd>
 </dl>
 </dd>
@@ -10029,12 +11129,7 @@ Create a new API associated with your tenant. Note that all new APIs must be reg
 <dd>
 
 ```java
-client.resourceServers().create(
-    CreateResourceServerRequestContent
-        .builder()
-        .identifier("identifier")
-        .build()
-);
+client.roles().get("id");
 ```
 </dd>
 </dl>
@@ -10049,127 +11144,120 @@ client.resourceServers().create(
 <dl>
 <dd>
 
-**name:** `Optional<String>` — Friendly name for this resource server. Can not contain `<` or `>` characters.
+**id:** `String` — ID of the role to retrieve.
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**identifier:** `String` — Unique identifier for the API used as the audience parameter on authorization calls. Can not be changed once set.
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.roles.delete(id)</code></summary>
 <dl>
 <dd>
 
-**scopes:** `Optional<List<ResourceServerScope>>` — List of permissions (scopes) that this API uses.
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**signingAlg:** `Optional<SigningAlgorithmEnum>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**signingSecret:** `Optional<String>` — Secret used to sign tokens when using symmetric algorithms (HS256).
-    
+Delete a specific [user role](https://auth0.com/docs/manage-users/access-control/rbac) from your tenant. Once deleted, it is removed from any user who was previously assigned that role. This action cannot be undone.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**allowOfflineAccess:** `Optional<Boolean>` — Whether refresh tokens can be issued for this API (true) or not (false).
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**allowOnlineAccess:** `Optional<Boolean>` — Whether Online Refresh Tokens can be issued for this API (true) or not (false).
-    
+```java
+client.roles().delete("id");
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**allowOnlineAccessWithEphemeralSessions:** `Optional<Boolean>` — Whether Online Refresh Tokens can be issued even when sessions are configured as ephemeral (true) or not (false).
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**tokenLifetime:** `Optional<Integer>` — Expiration value (in seconds) for access tokens issued for this API from the token endpoint.
+**id:** `String` — ID of the role to delete.
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**tokenDialect:** `Optional<ResourceServerTokenDialectSchemaEnum>` 
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.roles.update(id, request) -> UpdateRoleResponseContent</code></summary>
 <dl>
 <dd>
 
-**skipConsentForVerifiableFirstPartyClients:** `Optional<Boolean>` — Whether to skip user consent for applications flagged as first party (true) or not (false).
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**enforcePolicies:** `Optional<Boolean>` — Whether to enforce authorization policies (true) or to ignore them (false).
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**tokenEncryption:** `Optional<ResourceServerTokenEncryption>` 
-    
+Modify the details of a specific [user role](https://auth0.com/docs/manage-users/access-control/rbac) specified by ID.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**consentPolicy:** `Optional<ResourceServerConsentPolicyEnum>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**authorizationDetails:** `Optional<List<Object>>` 
-    
+```java
+client.roles().update(
+    "id",
+    UpdateRoleRequestContent
+        .builder()
+        .build()
+);
+```
 </dd>
 </dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
 
 <dl>
 <dd>
 
-**proofOfPossession:** `Optional<ResourceServerProofOfPossession>` 
+<dl>
+<dd>
+
+**id:** `String` — ID of the role to update.
     
 </dd>
 </dl>
@@ -10177,7 +11265,7 @@ client.resourceServers().create(
 <dl>
 <dd>
 
-**subjectTypeAuthorization:** `Optional<ResourceServerSubjectTypeAuthorization>` 
+**name:** `Optional<String>` — Name of this role.
     
 </dd>
 </dl>
@@ -10185,7 +11273,7 @@ client.resourceServers().create(
 <dl>
 <dd>
 
-**authorizationPolicy:** `Optional<ResourceServerAuthorizationPolicy>` 
+**description:** `Optional<String>` — Description of this role.
     
 </dd>
 </dl>
@@ -10197,7 +11285,8 @@ client.resourceServers().create(
 </dl>
 </details>
 
-<details><summary><code>client.resourceServers.get(id) -> GetResourceServerResponseContent</code></summary>
+## Rules
+<details><summary><code>client.rules.list() -> SyncPagingIterable&amp;lt;Rule&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -10209,7 +11298,7 @@ client.resourceServers().create(
 <dl>
 <dd>
 
-Retrieve <a href="https://auth0.com/docs/apis">API</a> details with the given ID.
+Retrieve a filtered list of [rules](https://auth0.com/docs/rules). Accepts a list of fields to include or exclude.
 </dd>
 </dl>
 </dd>
@@ -10224,10 +11313,14 @@ Retrieve <a href="https://auth0.com/docs/apis">API</a> details with the given ID
 <dd>
 
 ```java
-client.resourceServers().get(
-    "id",
-    GetResourceServerRequestParameters
+client.rules().list(
+    ListRulesRequestParameters
         .builder()
+        .page(1)
+        .perPage(1)
+        .includeTotals(true)
+        .enabled(true)
+        .fields("fields")
         .includeFields(true)
         .build()
 );
@@ -10245,7 +11338,7 @@ client.resourceServers().get(
 <dl>
 <dd>
 
-**id:** `String` — ID or audience of the resource server to retrieve.
+**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
     
 </dd>
 </dl>
@@ -10253,61 +11346,39 @@ client.resourceServers().get(
 <dl>
 <dd>
 
-**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
+**perPage:** `Optional<Integer>` — Number of results per page.
     
 </dd>
 </dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
 
-<details><summary><code>client.resourceServers.delete(id)</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
-
-<dl>
-<dd>
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
-Delete an existing API by ID. For more information, read <a href="https://www.auth0.com/docs/get-started/apis/api-settings">API Settings</a>.
-</dd>
-</dl>
+**enabled:** `Optional<Boolean>` — Optional filter on whether a rule is enabled (true) or disabled (false).
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-```java
-client.resourceServers().delete("id");
-```
-</dd>
-</dl>
+**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-**id:** `String` — ID or the audience of the resource server to delete.
+**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
     
 </dd>
 </dl>
@@ -10319,7 +11390,7 @@ client.resourceServers().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.resourceServers.update(id, request) -> UpdateResourceServerResponseContent</code></summary>
+<details><summary><code>client.rules.create(request) -> CreateRuleResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -10331,7 +11402,9 @@ client.resourceServers().delete("id");
 <dl>
 <dd>
 
-Change an existing API setting by resource server ID. For more information, read <a href="https://www.auth0.com/docs/get-started/apis/api-settings">API Settings</a>.
+Create a [new rule](https://auth0.com/docs/rules#create-a-new-rule-using-the-management-api).
+
+Note: Changing a rule's stage of execution from the default `login_success` can change the rule's function signature to have user omitted.
 </dd>
 </dl>
 </dd>
@@ -10346,10 +11419,11 @@ Change an existing API setting by resource server ID. For more information, read
 <dd>
 
 ```java
-client.resourceServers().update(
-    "id",
-    UpdateResourceServerRequestContent
+client.rules().create(
+    CreateRuleRequestContent
         .builder()
+        .name("name")
+        .script("script")
         .build()
 );
 ```
@@ -10366,7 +11440,7 @@ client.resourceServers().update(
 <dl>
 <dd>
 
-**id:** `String` — ID or audience of the resource server to update.
+**name:** `String` — Name of this rule.
     
 </dd>
 </dl>
@@ -10374,7 +11448,7 @@ client.resourceServers().update(
 <dl>
 <dd>
 
-**name:** `Optional<String>` — Friendly name for this resource server. Can not contain `<` or `>` characters.
+**script:** `String` — Code to be executed when this rule runs.
     
 </dd>
 </dl>
@@ -10382,7 +11456,7 @@ client.resourceServers().update(
 <dl>
 <dd>
 
-**scopes:** `Optional<List<ResourceServerScope>>` — List of permissions (scopes) that this API uses.
+**order:** `Optional<Double>` — Order that this rule should execute in relative to other rules. Lower-valued rules execute first.
     
 </dd>
 </dl>
@@ -10390,63 +11464,68 @@ client.resourceServers().update(
 <dl>
 <dd>
 
-**signingAlg:** `Optional<SigningAlgorithmEnum>` 
+**enabled:** `Optional<Boolean>` — Whether the rule is enabled (true), or disabled (false).
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**signingSecret:** `Optional<String>` — Secret used to sign tokens when using symmetric algorithms (HS256).
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.rules.get(id) -> GetRuleResponseContent</code></summary>
 <dl>
 <dd>
 
-**skipConsentForVerifiableFirstPartyClients:** `Optional<Boolean>` — Whether to skip user consent for applications flagged as first party (true) or not (false).
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**allowOfflineAccess:** `Optional<Boolean>` — Whether refresh tokens can be issued for this API (true) or not (false).
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**allowOnlineAccess:** `Optional<Boolean>` — Whether Online Refresh Tokens can be issued for this API (true) or not (false).
-    
+Retrieve [rule](https://auth0.com/docs/rules) details. Accepts a list of fields to include or exclude in the result.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**allowOnlineAccessWithEphemeralSessions:** `Optional<Boolean>` — Whether Online Refresh Tokens can be issued even when sessions are configured as ephemeral (true) or not (false).
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**tokenLifetime:** `Optional<Integer>` — Expiration value (in seconds) for access tokens issued for this API from the token endpoint.
-    
+```java
+client.rules().get(
+    "id",
+    GetRuleRequestParameters
+        .builder()
+        .fields("fields")
+        .includeFields(true)
+        .build()
+);
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**tokenDialect:** `Optional<ResourceServerTokenDialectSchemaEnum>` 
+<dl>
+<dd>
+
+**id:** `String` — ID of the rule to retrieve.
     
 </dd>
 </dl>
@@ -10454,7 +11533,7 @@ client.resourceServers().update(
 <dl>
 <dd>
 
-**enforcePolicies:** `Optional<Boolean>` — Whether authorization policies are enforced (true) or not enforced (false).
+**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
     
 </dd>
 </dl>
@@ -10462,47 +11541,61 @@ client.resourceServers().update(
 <dl>
 <dd>
 
-**tokenEncryption:** `Optional<ResourceServerTokenEncryption>` 
+**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**consentPolicy:** `Optional<ResourceServerConsentPolicyEnum>` 
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.rules.delete(id)</code></summary>
 <dl>
 <dd>
 
-**authorizationDetails:** `Optional<List<Object>>` 
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**proofOfPossession:** `Optional<ResourceServerProofOfPossession>` 
-    
+<dl>
+<dd>
+
+Delete a rule.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**subjectTypeAuthorization:** `Optional<ResourceServerSubjectTypeAuthorization>` 
-    
+<dl>
+<dd>
+
+```java
+client.rules().delete("id");
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**authorizationPolicy:** `Optional<ResourceServerAuthorizationPolicy>` 
+<dl>
+<dd>
+
+**id:** `String` — ID of the rule to delete.
     
 </dd>
 </dl>
@@ -10514,8 +11607,7 @@ client.resourceServers().update(
 </dl>
 </details>
 
-## Roles
-<details><summary><code>client.roles.list() -> SyncPagingIterable&amp;lt;Role&amp;gt;</code></summary>
+<details><summary><code>client.rules.update(id, request) -> UpdateRuleResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -10527,9 +11619,7 @@ client.resourceServers().update(
 <dl>
 <dd>
 
-Retrieve detailed list of user roles created in your tenant.
-
-**Note**: The returned list does not include standard roles available for tenant members, such as Admin or Support Access.
+Update an existing rule.
 </dd>
 </dl>
 </dd>
@@ -10544,13 +11634,10 @@ Retrieve detailed list of user roles created in your tenant.
 <dd>
 
 ```java
-client.roles().list(
-    ListRolesRequestParameters
+client.rules().update(
+    "id",
+    UpdateRuleRequestContent
         .builder()
-        .perPage(1)
-        .page(1)
-        .includeTotals(true)
-        .nameFilter("name_filter")
         .build()
 );
 ```
@@ -10567,7 +11654,7 @@ client.roles().list(
 <dl>
 <dd>
 
-**perPage:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+**id:** `String` — ID of the rule to retrieve.
     
 </dd>
 </dl>
@@ -10575,7 +11662,7 @@ client.roles().list(
 <dl>
 <dd>
 
-**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
+**script:** `Optional<String>` — Code to be executed when this rule runs.
     
 </dd>
 </dl>
@@ -10583,7 +11670,7 @@ client.roles().list(
 <dl>
 <dd>
 
-**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+**name:** `Optional<String>` — Name of this rule.
     
 </dd>
 </dl>
@@ -10591,7 +11678,15 @@ client.roles().list(
 <dl>
 <dd>
 
-**nameFilter:** `Optional<String>` — Optional filter on name (case-insensitive).
+**order:** `Optional<Double>` — Order that this rule should execute in relative to other rules. Lower-valued rules execute first.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**enabled:** `Optional<Boolean>` — Whether the rule is enabled (true), or disabled (false).
     
 </dd>
 </dl>
@@ -10603,7 +11698,8 @@ client.roles().list(
 </dl>
 </details>
 
-<details><summary><code>client.roles.create(request) -> CreateRoleResponseContent</code></summary>
+## RulesConfigs
+<details><summary><code>client.rulesConfigs.list() -> List&amp;lt;RulesConfig&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -10615,9 +11711,9 @@ client.roles().list(
 <dl>
 <dd>
 
-Create a user role for [Role-Based Access Control](https://auth0.com/docs/manage-users/access-control/rbac).
+Retrieve rules config variable keys.
 
-**Note**: New roles are not associated with any permissions by default. To assign existing permissions to your role, review Associate Permissions with a Role. To create new permissions, review Add API Permissions.
+    Note: For security, config variable values cannot be retrieved outside rule execution.
 </dd>
 </dl>
 </dd>
@@ -10632,47 +11728,19 @@ Create a user role for [Role-Based Access Control](https://auth0.com/docs/manage
 <dd>
 
 ```java
-client.roles().create(
-    CreateRoleRequestContent
-        .builder()
-        .name("name")
-        .build()
-);
+client.rulesConfigs().list();
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**name:** `String` — Name of the role.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**description:** `Optional<String>` — Description of the role.
-    
-</dd>
-</dl>
-</dd>
-</dl>
-
 
 </dd>
 </dl>
 </details>
 
-<details><summary><code>client.roles.get(id) -> GetRoleResponseContent</code></summary>
+<details><summary><code>client.rulesConfigs.set(key, request) -> SetRulesConfigResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -10684,7 +11752,7 @@ client.roles().create(
 <dl>
 <dd>
 
-Retrieve details about a specific [user role](https://auth0.com/docs/manage-users/access-control/rbac) specified by ID.
+Sets a rules config variable.
 </dd>
 </dl>
 </dd>
@@ -10699,7 +11767,13 @@ Retrieve details about a specific [user role](https://auth0.com/docs/manage-user
 <dd>
 
 ```java
-client.roles().get("id");
+client.rulesConfigs().set(
+    "key",
+    SetRulesConfigRequestContent
+        .builder()
+        .value("value")
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -10714,7 +11788,15 @@ client.roles().get("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the role to retrieve.
+**key:** `String` — Key of the rules config variable to set (max length: 127 characters).
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**value:** `String` — Value for a rules config variable.
     
 </dd>
 </dl>
@@ -10726,7 +11808,7 @@ client.roles().get("id");
 </dl>
 </details>
 
-<details><summary><code>client.roles.delete(id)</code></summary>
+<details><summary><code>client.rulesConfigs.delete(key)</code></summary>
 <dl>
 <dd>
 
@@ -10738,7 +11820,7 @@ client.roles().get("id");
 <dl>
 <dd>
 
-Delete a specific [user role](https://auth0.com/docs/manage-users/access-control/rbac) from your tenant. Once deleted, it is removed from any user who was previously assigned that role. This action cannot be undone.
+Delete a rules config variable identified by its key.
 </dd>
 </dl>
 </dd>
@@ -10753,7 +11835,7 @@ Delete a specific [user role](https://auth0.com/docs/manage-users/access-control
 <dd>
 
 ```java
-client.roles().delete("id");
+client.rulesConfigs().delete("key");
 ```
 </dd>
 </dl>
@@ -10768,7 +11850,7 @@ client.roles().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the role to delete.
+**key:** `String` — Key of the rules config variable to delete.
     
 </dd>
 </dl>
@@ -10780,7 +11862,8 @@ client.roles().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.roles.update(id, request) -> UpdateRoleResponseContent</code></summary>
+## SelfServiceProfiles
+<details><summary><code>client.selfServiceProfiles.list() -> SyncPagingIterable&amp;lt;SelfServiceProfile&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -10792,7 +11875,7 @@ client.roles().delete("id");
 <dl>
 <dd>
 
-Modify the details of a specific [user role](https://auth0.com/docs/manage-users/access-control/rbac) specified by ID.
+Retrieves self-service profiles.
 </dd>
 </dl>
 </dd>
@@ -10807,10 +11890,12 @@ Modify the details of a specific [user role](https://auth0.com/docs/manage-users
 <dd>
 
 ```java
-client.roles().update(
-    "id",
-    UpdateRoleRequestContent
+client.selfServiceProfiles().list(
+    ListSelfServiceProfilesRequestParameters
         .builder()
+        .page(1)
+        .perPage(1)
+        .includeTotals(true)
         .build()
 );
 ```
@@ -10827,7 +11912,7 @@ client.roles().update(
 <dl>
 <dd>
 
-**id:** `String` — ID of the role to update.
+**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
     
 </dd>
 </dl>
@@ -10835,7 +11920,7 @@ client.roles().update(
 <dl>
 <dd>
 
-**name:** `Optional<String>` — Name of this role.
+**perPage:** `Optional<Integer>` — Number of results per page. Defaults to 50.
     
 </dd>
 </dl>
@@ -10843,7 +11928,7 @@ client.roles().update(
 <dl>
 <dd>
 
-**description:** `Optional<String>` — Description of this role.
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
     
 </dd>
 </dl>
@@ -10855,8 +11940,7 @@ client.roles().update(
 </dl>
 </details>
 
-## Rules
-<details><summary><code>client.rules.list() -> SyncPagingIterable&amp;lt;Rule&amp;gt;</code></summary>
+<details><summary><code>client.selfServiceProfiles.create(request) -> CreateSelfServiceProfileResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -10868,7 +11952,7 @@ client.roles().update(
 <dl>
 <dd>
 
-Retrieve a filtered list of [rules](https://auth0.com/docs/rules). Accepts a list of fields to include or exclude.
+Creates a self-service profile.
 </dd>
 </dl>
 </dd>
@@ -10883,15 +11967,10 @@ Retrieve a filtered list of [rules](https://auth0.com/docs/rules). Accepts a lis
 <dd>
 
 ```java
-client.rules().list(
-    ListRulesRequestParameters
+client.selfServiceProfiles().create(
+    CreateSelfServiceProfileRequestContent
         .builder()
-        .page(1)
-        .perPage(1)
-        .includeTotals(true)
-        .enabled(true)
-        .fields("fields")
-        .includeFields(true)
+        .name("name")
         .build()
 );
 ```
@@ -10908,7 +11987,7 @@ client.rules().list(
 <dl>
 <dd>
 
-**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
+**name:** `String` — The name of the self-service Profile.
     
 </dd>
 </dl>
@@ -10916,7 +11995,7 @@ client.rules().list(
 <dl>
 <dd>
 
-**perPage:** `Optional<Integer>` — Number of results per page.
+**description:** `Optional<String>` — The description of the self-service Profile.
     
 </dd>
 </dl>
@@ -10924,7 +12003,7 @@ client.rules().list(
 <dl>
 <dd>
 
-**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+**branding:** `Optional<SelfServiceProfileBrandingProperties>` 
     
 </dd>
 </dl>
@@ -10932,7 +12011,7 @@ client.rules().list(
 <dl>
 <dd>
 
-**enabled:** `Optional<Boolean>` — Optional filter on whether a rule is enabled (true) or disabled (false).
+**allowedStrategies:** `Optional<List<SelfServiceProfileAllowedStrategyEnum>>` — List of IdP strategies that will be shown to users during the Self-Service Enterprise Configuration flow. Possible values: [`oidc`, `samlp`, `waad`, `google-apps`, `adfs`, `okta`, `auth0-samlp`, `okta-samlp`, `keycloak-samlp`, `pingfederate`]
     
 </dd>
 </dl>
@@ -10940,7 +12019,7 @@ client.rules().list(
 <dl>
 <dd>
 
-**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
+**userAttributes:** `Optional<List<SelfServiceProfileUserAttribute>>` — List of attributes to be mapped that will be shown to the user during the Self-Service Enterprise Configuration flow.
     
 </dd>
 </dl>
@@ -10948,7 +12027,7 @@ client.rules().list(
 <dl>
 <dd>
 
-**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
+**userAttributeProfileId:** `Optional<String>` — ID of the user-attribute-profile to associate with this self-service profile.
     
 </dd>
 </dl>
@@ -10960,7 +12039,7 @@ client.rules().list(
 </dl>
 </details>
 
-<details><summary><code>client.rules.create(request) -> CreateRuleResponseContent</code></summary>
+<details><summary><code>client.selfServiceProfiles.get(id) -> GetSelfServiceProfileResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -10972,9 +12051,7 @@ client.rules().list(
 <dl>
 <dd>
 
-Create a [new rule](https://auth0.com/docs/rules#create-a-new-rule-using-the-management-api).
-
-Note: Changing a rule's stage of execution from the default `login_success` can change the rule's function signature to have user omitted.
+Retrieves a self-service profile by Id.
 </dd>
 </dl>
 </dd>
@@ -10989,13 +12066,7 @@ Note: Changing a rule's stage of execution from the default `login_success` can
 <dd>
 
 ```java
-client.rules().create(
-    CreateRuleRequestContent
-        .builder()
-        .name("name")
-        .script("script")
-        .build()
-);
+client.selfServiceProfiles().get("id");
 ```
 </dd>
 </dl>
@@ -11010,31 +12081,61 @@ client.rules().create(
 <dl>
 <dd>
 
-**name:** `String` — Name of this rule.
+**id:** `String` — The id of the self-service profile to retrieve
     
 </dd>
 </dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
 
+<details><summary><code>client.selfServiceProfiles.delete(id)</code></summary>
 <dl>
 <dd>
 
-**script:** `String` — Code to be executed when this rule runs.
-    
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Deletes a self-service profile by Id.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**order:** `Optional<Double>` — Order that this rule should execute in relative to other rules. Lower-valued rules execute first.
-    
+<dl>
+<dd>
+
+```java
+client.selfServiceProfiles().delete("id");
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**enabled:** `Optional<Boolean>` — Whether the rule is enabled (true), or disabled (false).
+<dl>
+<dd>
+
+**id:** `String` — The id of the self-service profile to delete
     
 </dd>
 </dl>
@@ -11046,7 +12147,7 @@ client.rules().create(
 </dl>
 </details>
 
-<details><summary><code>client.rules.get(id) -> GetRuleResponseContent</code></summary>
+<details><summary><code>client.selfServiceProfiles.update(id, request) -> UpdateSelfServiceProfileResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -11058,7 +12159,7 @@ client.rules().create(
 <dl>
 <dd>
 
-Retrieve [rule](https://auth0.com/docs/rules) details. Accepts a list of fields to include or exclude in the result.
+Updates a self-service profile.
 </dd>
 </dl>
 </dd>
@@ -11073,12 +12174,10 @@ Retrieve [rule](https://auth0.com/docs/rules) details. Accepts a list of fields
 <dd>
 
 ```java
-client.rules().get(
+client.selfServiceProfiles().update(
     "id",
-    GetRuleRequestParameters
+    UpdateSelfServiceProfileRequestContent
         .builder()
-        .fields("fields")
-        .includeFields(true)
         .build()
 );
 ```
@@ -11095,7 +12194,7 @@ client.rules().get(
 <dl>
 <dd>
 
-**id:** `String` — ID of the rule to retrieve.
+**id:** `String` — The id of the self-service profile to update
     
 </dd>
 </dl>
@@ -11103,7 +12202,7 @@ client.rules().get(
 <dl>
 <dd>
 
-**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
+**name:** `Optional<String>` — The name of the self-service Profile.
     
 </dd>
 </dl>
@@ -11111,7 +12210,39 @@ client.rules().get(
 <dl>
 <dd>
 
-**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
+**description:** `Optional<String>` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**branding:** `Optional<SelfServiceProfileBrandingProperties>` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**allowedStrategies:** `Optional<List<SelfServiceProfileAllowedStrategyEnum>>` — List of IdP strategies that will be shown to users during the Self-Service Enterprise Configuration flow. Possible values: [`oidc`, `samlp`, `waad`, `google-apps`, `adfs`, `okta`, `auth0-samlp`, `okta-samlp`, `keycloak-samlp`, `pingfederate`]
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**userAttributes:** `Optional<List<SelfServiceProfileUserAttribute>>` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**userAttributeProfileId:** `Optional<String>` — ID of the user-attribute-profile to associate with this self-service profile.
     
 </dd>
 </dl>
@@ -11123,7 +12254,8 @@ client.rules().get(
 </dl>
 </details>
 
-<details><summary><code>client.rules.delete(id)</code></summary>
+## Sessions
+<details><summary><code>client.sessions.get(id) -> GetSessionResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -11135,7 +12267,7 @@ client.rules().get(
 <dl>
 <dd>
 
-Delete a rule.
+Retrieve session information.
 </dd>
 </dl>
 </dd>
@@ -11150,7 +12282,7 @@ Delete a rule.
 <dd>
 
 ```java
-client.rules().delete("id");
+client.sessions().get("id");
 ```
 </dd>
 </dl>
@@ -11165,7 +12297,7 @@ client.rules().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the rule to delete.
+**id:** `String` — ID of session to retrieve
     
 </dd>
 </dl>
@@ -11177,7 +12309,7 @@ client.rules().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.rules.update(id, request) -> UpdateRuleResponseContent</code></summary>
+<details><summary><code>client.sessions.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -11189,7 +12321,7 @@ client.rules().delete("id");
 <dl>
 <dd>
 
-Update an existing rule.
+Delete a session by ID.
 </dd>
 </dl>
 </dd>
@@ -11204,12 +12336,7 @@ Update an existing rule.
 <dd>
 
 ```java
-client.rules().update(
-    "id",
-    UpdateRuleRequestContent
-        .builder()
-        .build()
-);
+client.sessions().delete("id");
 ```
 </dd>
 </dl>
@@ -11224,56 +12351,37 @@ client.rules().update(
 <dl>
 <dd>
 
-**id:** `String` — ID of the rule to retrieve.
+**id:** `String` — ID of the session to delete.
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**script:** `Optional<String>` — Code to be executed when this rule runs.
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.sessions.update(id, request) -> UpdateSessionResponseContent</code></summary>
 <dl>
 <dd>
 
-**name:** `Optional<String>` — Name of this rule.
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**order:** `Optional<Double>` — Order that this rule should execute in relative to other rules. Lower-valued rules execute first.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**enabled:** `Optional<Boolean>` — Whether the rule is enabled (true), or disabled (false).
-    
-</dd>
-</dl>
+Update session information.
 </dd>
 </dl>
-
-
 </dd>
 </dl>
-</details>
-
-## RulesConfigs
-<details><summary><code>client.rulesConfigs.list() -> List&amp;lt;RulesConfig&amp;gt;</code></summary>
-<dl>
-<dd>
 
-#### 📝 Description
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -11281,15 +12389,20 @@ client.rules().update(
 <dl>
 <dd>
 
-Retrieve rules config variable keys.
-
-    Note: For security, config variable values cannot be retrieved outside rule execution.
+```java
+client.sessions().update(
+    "id",
+    UpdateSessionRequestContent
+        .builder()
+        .build()
+);
+```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -11297,9 +12410,16 @@ Retrieve rules config variable keys.
 <dl>
 <dd>
 
-```java
-client.rulesConfigs().list();
-```
+**id:** `String` — ID of the session to update.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**sessionMetadata:** `Optional<Map<String, Object>>` — Metadata associated with the session. Pass null or {} to remove all session_metadata.
+    
 </dd>
 </dl>
 </dd>
@@ -11310,7 +12430,7 @@ client.rulesConfigs().list();
 </dl>
 </details>
 
-<details><summary><code>client.rulesConfigs.set(key, request) -> SetRulesConfigResponseContent</code></summary>
+<details><summary><code>client.sessions.revoke(id)</code></summary>
 <dl>
 <dd>
 
@@ -11322,7 +12442,7 @@ client.rulesConfigs().list();
 <dl>
 <dd>
 
-Sets a rules config variable.
+Revokes a session by ID and all associated refresh tokens.
 </dd>
 </dl>
 </dd>
@@ -11337,13 +12457,7 @@ Sets a rules config variable.
 <dd>
 
 ```java
-client.rulesConfigs().set(
-    "key",
-    SetRulesConfigRequestContent
-        .builder()
-        .value("value")
-        .build()
-);
+client.sessions().revoke("id");
 ```
 </dd>
 </dl>
@@ -11358,15 +12472,7 @@ client.rulesConfigs().set(
 <dl>
 <dd>
 
-**key:** `String` — Key of the rules config variable to set (max length: 127 characters).
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**value:** `String` — Value for a rules config variable.
+**id:** `String` — ID of the session to revoke.
     
 </dd>
 </dl>
@@ -11378,7 +12484,8 @@ client.rulesConfigs().set(
 </dl>
 </details>
 
-<details><summary><code>client.rulesConfigs.delete(key)</code></summary>
+## Stats
+<details><summary><code>client.stats.getActiveUsersCount() -> Double</code></summary>
 <dl>
 <dd>
 
@@ -11390,7 +12497,7 @@ client.rulesConfigs().set(
 <dl>
 <dd>
 
-Delete a rules config variable identified by its key.
+Retrieve the number of active users that logged in during the last 30 days.
 </dd>
 </dl>
 </dd>
@@ -11405,35 +12512,19 @@ Delete a rules config variable identified by its key.
 <dd>
 
 ```java
-client.rulesConfigs().delete("key");
+client.stats().getActiveUsersCount();
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**key:** `String` — Key of the rules config variable to delete.
-    
-</dd>
-</dl>
-</dd>
-</dl>
-
 
 </dd>
 </dl>
 </details>
 
-## SelfServiceProfiles
-<details><summary><code>client.selfServiceProfiles.list() -> SyncPagingIterable&amp;lt;SelfServiceProfile&amp;gt;</code></summary>
+<details><summary><code>client.stats.getDaily() -> List&amp;lt;DailyStats&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -11445,7 +12536,7 @@ client.rulesConfigs().delete("key");
 <dl>
 <dd>
 
-Retrieves self-service profiles.
+Retrieve the number of logins, signups and breached-password detections (subscription required) that occurred each day within a specified date range.
 </dd>
 </dl>
 </dd>
@@ -11460,12 +12551,11 @@ Retrieves self-service profiles.
 <dd>
 
 ```java
-client.selfServiceProfiles().list(
-    ListSelfServiceProfilesRequestParameters
+client.stats().getDaily(
+    GetDailyStatsRequestParameters
         .builder()
-        .page(1)
-        .perPage(1)
-        .includeTotals(true)
+        .from("from")
+        .to("to")
         .build()
 );
 ```
@@ -11482,15 +12572,7 @@ client.selfServiceProfiles().list(
 <dl>
 <dd>
 
-**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**perPage:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+**from:** `Optional<String>` — Optional first day of the date range (inclusive) in YYYYMMDD format.
     
 </dd>
 </dl>
@@ -11498,7 +12580,7 @@ client.selfServiceProfiles().list(
 <dl>
 <dd>
 
-**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+**to:** `Optional<String>` — Optional last day of the date range (inclusive) in YYYYMMDD format.
     
 </dd>
 </dl>
@@ -11510,7 +12592,8 @@ client.selfServiceProfiles().list(
 </dl>
 </details>
 
-<details><summary><code>client.selfServiceProfiles.create(request) -> CreateSelfServiceProfileResponseContent</code></summary>
+## SupplementalSignals
+<details><summary><code>client.supplementalSignals.get() -> GetSupplementalSignalsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -11522,7 +12605,7 @@ client.selfServiceProfiles().list(
 <dl>
 <dd>
 
-Creates a self-service profile.
+Get the supplemental signals configuration for a tenant.
 </dd>
 </dl>
 </dd>
@@ -11537,67 +12620,66 @@ Creates a self-service profile.
 <dd>
 
 ```java
-client.selfServiceProfiles().create(
-    CreateSelfServiceProfileRequestContent
-        .builder()
-        .name("name")
-        .build()
-);
+client.supplementalSignals().get();
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
 
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.supplementalSignals.patch(request) -> PatchSupplementalSignalsResponseContent</code></summary>
 <dl>
 <dd>
 
+#### 📝 Description
+
 <dl>
 <dd>
 
-**name:** `String` — The name of the self-service Profile.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**description:** `Optional<String>` — The description of the self-service Profile.
-    
+Update the supplemental signals configuration for a tenant.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**branding:** `Optional<SelfServiceProfileBrandingProperties>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**allowedStrategies:** `Optional<List<SelfServiceProfileAllowedStrategyEnum>>` — List of IdP strategies that will be shown to users during the Self-Service Enterprise Configuration flow. Possible values: [`oidc`, `samlp`, `waad`, `google-apps`, `adfs`, `okta`, `auth0-samlp`, `okta-samlp`, `keycloak-samlp`, `pingfederate`]
-    
+```java
+client.supplementalSignals().patch(
+    UpdateSupplementalSignalsRequestContent
+        .builder()
+        .akamaiEnabled(true)
+        .build()
+);
+```
 </dd>
 </dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
 
 <dl>
 <dd>
 
-**userAttributes:** `Optional<List<SelfServiceProfileUserAttribute>>` — List of attributes to be mapped that will be shown to the user during the Self-Service Enterprise Configuration flow.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**userAttributeProfileId:** `Optional<String>` — ID of the user-attribute-profile to associate with this self-service profile.
+**akamaiEnabled:** `Boolean` — Indicates if incoming Akamai Headers should be processed
     
 </dd>
 </dl>
@@ -11609,7 +12691,8 @@ client.selfServiceProfiles().create(
 </dl>
 </details>
 
-<details><summary><code>client.selfServiceProfiles.get(id) -> GetSelfServiceProfileResponseContent</code></summary>
+## Tickets
+<details><summary><code>client.tickets.verifyEmail(request) -> VerifyEmailTicketResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -11621,7 +12704,7 @@ client.selfServiceProfiles().create(
 <dl>
 <dd>
 
-Retrieves a self-service profile by Id.
+Create an email verification ticket for a given user. An email verification ticket is a generated URL that the user can consume to verify their email address.
 </dd>
 </dl>
 </dd>
@@ -11636,7 +12719,12 @@ Retrieves a self-service profile by Id.
 <dd>
 
 ```java
-client.selfServiceProfiles().get("id");
+client.tickets().verifyEmail(
+    VerifyEmailTicketRequestContent
+        .builder()
+        .userId("user_id")
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -11651,61 +12739,55 @@ client.selfServiceProfiles().get("id");
 <dl>
 <dd>
 
-**id:** `String` — The id of the self-service profile to retrieve
+**resultUrl:** `Optional<String>` — URL the user will be redirected to in the classic Universal Login experience once the ticket is used. Cannot be specified when using client_id or organization_id.
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
+**userId:** `String` — user_id of for whom the ticket should be created.
+    
 </dd>
 </dl>
-</details>
 
-<details><summary><code>client.selfServiceProfiles.delete(id)</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
-
-<dl>
-<dd>
+**clientId:** `Optional<String>` — ID of the client (application). If provided for tenants using the New Universal Login experience, the email template and UI displays application details, and the user is prompted to redirect to the application's <a target='' href='https://auth0.com/docs/authenticate/login/auth0-universal-login/configure-default-login-routes#completing-the-password-reset-flow'>default login route</a> after the ticket is used. client_id is required to use the <a target='' href='https://auth0.com/docs/customize/actions/flows-and-triggers/post-change-password-flow'>Password Reset Post Challenge</a> trigger.
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
-Deletes a self-service profile by Id.
-</dd>
-</dl>
+**organizationId:** `Optional<String>` — (Optional) Organization ID – the ID of the Organization. If provided, organization parameters will be made available to the email template and organization branding will be applied to the prompt. In addition, the redirect link in the prompt will include organization_id and organization_name query string parameters.
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
-<dl>
-<dd>
-
-```java
-client.selfServiceProfiles().delete("id");
-```
-</dd>
-</dl>
+**ttlSec:** `Optional<Integer>` — Number of seconds for which the ticket is valid before expiration. If unspecified or set to 0, this value defaults to 432000 seconds (5 days).
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**includeEmailInRedirect:** `Optional<Boolean>` — Whether to include the email address as part of the returnUrl in the reset_email (true), or not (false).
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**id:** `String` — The id of the self-service profile to delete
+**identity:** `Optional<Identity>` 
     
 </dd>
 </dl>
@@ -11717,7 +12799,7 @@ client.selfServiceProfiles().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.selfServiceProfiles.update(id, request) -> UpdateSelfServiceProfileResponseContent</code></summary>
+<details><summary><code>client.tickets.changePassword(request) -> ChangePasswordTicketResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -11729,7 +12811,9 @@ client.selfServiceProfiles().delete("id");
 <dl>
 <dd>
 
-Updates a self-service profile.
+Create a password change ticket for a given user. A password change ticket is a generated URL that the user can consume to start a reset password flow.
+
+Note: This endpoint does not verify the given user’s identity. If you call this endpoint within your application, you must design your application to verify the user’s identity.
 </dd>
 </dl>
 </dd>
@@ -11744,9 +12828,8 @@ Updates a self-service profile.
 <dd>
 
 ```java
-client.selfServiceProfiles().update(
-    "id",
-    UpdateSelfServiceProfileRequestContent
+client.tickets().changePassword(
+    ChangePasswordTicketRequestContent
         .builder()
         .build()
 );
@@ -11764,7 +12847,7 @@ client.selfServiceProfiles().update(
 <dl>
 <dd>
 
-**id:** `String` — The id of the self-service profile to update
+**resultUrl:** `Optional<String>` — URL the user will be redirected to in the classic Universal Login experience once the ticket is used. Cannot be specified when using organization_id. May be specified together with client_id when the tenant has a custom password reset page enabled and a password-reset-post-challenge Action bound.
     
 </dd>
 </dl>
@@ -11772,7 +12855,7 @@ client.selfServiceProfiles().update(
 <dl>
 <dd>
 
-**name:** `Optional<String>` — The name of the self-service Profile.
+**userId:** `Optional<String>` — user_id of for whom the ticket should be created.
     
 </dd>
 </dl>
@@ -11780,7 +12863,7 @@ client.selfServiceProfiles().update(
 <dl>
 <dd>
 
-**description:** `Optional<String>` 
+**clientId:** `Optional<String>` — ID of the client (application). If provided for tenants using the New Universal Login experience, the email template and UI displays application details, and the user is prompted to redirect to the application's <a target='' href='https://auth0.com/docs/authenticate/login/auth0-universal-login/configure-default-login-routes#completing-the-password-reset-flow'>default login route</a> after the ticket is used. client_id is required to use the <a target='' href='https://auth0.com/docs/customize/actions/flows-and-triggers/post-change-password-flow'>Password Reset Post Challenge</a> trigger.
     
 </dd>
 </dl>
@@ -11788,7 +12871,7 @@ client.selfServiceProfiles().update(
 <dl>
 <dd>
 
-**branding:** `Optional<SelfServiceProfileBrandingProperties>` 
+**organizationId:** `Optional<String>` — (Optional) Organization ID – the ID of the Organization. If provided, organization parameters will be made available to the email template and organization branding will be applied to the prompt. In addition, the redirect link in the prompt will include organization_id and organization_name query string parameters.
     
 </dd>
 </dl>
@@ -11796,7 +12879,7 @@ client.selfServiceProfiles().update(
 <dl>
 <dd>
 
-**allowedStrategies:** `Optional<List<SelfServiceProfileAllowedStrategyEnum>>` — List of IdP strategies that will be shown to users during the Self-Service Enterprise Configuration flow. Possible values: [`oidc`, `samlp`, `waad`, `google-apps`, `adfs`, `okta`, `auth0-samlp`, `okta-samlp`, `keycloak-samlp`, `pingfederate`]
+**connectionId:** `Optional<String>` — ID of the connection. If provided, allows the user to be specified using email instead of user_id. If you set this value, you must also send the email parameter. You cannot send user_id when specifying a connection_id.
     
 </dd>
 </dl>
@@ -11804,7 +12887,7 @@ client.selfServiceProfiles().update(
 <dl>
 <dd>
 
-**userAttributes:** `Optional<List<SelfServiceProfileUserAttribute>>` 
+**email:** `Optional<String>` — Email address of the user for whom the tickets should be created. Requires the connection_id parameter. Cannot be specified when using user_id.
     
 </dd>
 </dl>
@@ -11812,62 +12895,31 @@ client.selfServiceProfiles().update(
 <dl>
 <dd>
 
-**userAttributeProfileId:** `Optional<String>` — ID of the user-attribute-profile to associate with this self-service profile.
+**ttlSec:** `Optional<Integer>` — Number of seconds for which the ticket is valid before expiration. If unspecified or set to 0, this value defaults to 432000 seconds (5 days).
     
 </dd>
 </dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-## Sessions
-<details><summary><code>client.sessions.get(id) -> GetSessionResponseContent</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
 
 <dl>
 <dd>
 
-Retrieve session information.
-</dd>
-</dl>
+**markEmailAsVerified:** `Optional<Boolean>` — Whether to set the email_verified attribute to true (true) or whether it should not be updated (false).
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
-<dl>
-<dd>
-
-```java
-client.sessions().get("id");
-```
-</dd>
-</dl>
+**includeEmailInRedirect:** `Optional<Boolean>` — Whether to include the email address as part of the returnUrl in the reset_email (true), or not (false).
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
-<dl>
-<dd>
-
-**id:** `String` — ID of session to retrieve
+**identity:** `Optional<ChangePasswordTicketIdentity>` 
     
 </dd>
 </dl>
@@ -11879,7 +12931,8 @@ client.sessions().get("id");
 </dl>
 </details>
 
-<details><summary><code>client.sessions.delete(id)</code></summary>
+## TokenExchangeProfiles
+<details><summary><code>client.tokenExchangeProfiles.list() -> SyncPagingIterable&amp;lt;TokenExchangeProfileResponseContent&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -11891,7 +12944,16 @@ client.sessions().get("id");
 <dl>
 <dd>
 
-Delete a session by ID.
+Retrieve a list of all Token Exchange Profiles available in your tenant.
+
+By using this feature, you agree to the applicable Free Trial terms in [Okta’s Master Subscription Agreement](https://www.okta.com/legal/). It is your responsibility to securely validate the user’s subject_token. See [User Guide](https://auth0.com/docs/authenticate/custom-token-exchange) for more details.
+
+This endpoint supports Checkpoint pagination. To search by checkpoint, use the following parameters:
+
+- `from`: Optional id from which to start selection.
+- `take`: The total amount of entries to retrieve when using the from parameter. Defaults to 50.
+
+**Note**: The first time you call this endpoint using checkpoint pagination, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no pages are remaining.
 </dd>
 </dl>
 </dd>
@@ -11906,7 +12968,13 @@ Delete a session by ID.
 <dd>
 
 ```java
-client.sessions().delete("id");
+client.tokenExchangeProfiles().list(
+    TokenExchangeProfilesListRequest
+        .builder()
+        .from("from")
+        .take(1)
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -11921,7 +12989,15 @@ client.sessions().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the session to delete.
+**from:** `Optional<String>` — Optional Id from which to start selection.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
     
 </dd>
 </dl>
@@ -11933,7 +13009,7 @@ client.sessions().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.sessions.update(id, request) -> UpdateSessionResponseContent</code></summary>
+<details><summary><code>client.tokenExchangeProfiles.create(request) -> CreateTokenExchangeProfileResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -11945,7 +13021,9 @@ client.sessions().delete("id");
 <dl>
 <dd>
 
-Update session information.
+Create a new Token Exchange Profile within your tenant.
+
+By using this feature, you agree to the applicable Free Trial terms in [Okta’s Master Subscription Agreement](https://www.okta.com/legal/). It is your responsibility to securely validate the user’s subject_token. See [User Guide](https://auth0.com/docs/authenticate/custom-token-exchange) for more details.
 </dd>
 </dl>
 </dd>
@@ -11960,10 +13038,13 @@ Update session information.
 <dd>
 
 ```java
-client.sessions().update(
-    "id",
-    UpdateSessionRequestContent
+client.tokenExchangeProfiles().create(
+    CreateTokenExchangeProfileRequestContent
         .builder()
+        .name("name")
+        .subjectTokenType("subject_token_type")
+        .actionId("action_id")
+        .type(TokenExchangeProfileTypeEnum.CUSTOM_AUTHENTICATION)
         .build()
 );
 ```
@@ -11980,7 +13061,7 @@ client.sessions().update(
 <dl>
 <dd>
 
-**id:** `String` — ID of the session to update.
+**name:** `String` — Friendly name of this profile.
     
 </dd>
 </dl>
@@ -11988,7 +13069,23 @@ client.sessions().update(
 <dl>
 <dd>
 
-**sessionMetadata:** `Optional<Map<String, Object>>` — Metadata associated with the session. Pass null or {} to remove all session_metadata.
+**subjectTokenType:** `String` — Subject token type for this profile. When receiving a token exchange request on the Authentication API, the corresponding token exchange profile with a matching subject_token_type will be executed. This must be a URI.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**actionId:** `String` — The ID of the Custom Token Exchange action to execute for this profile, in order to validate the subject_token. The action must use the custom-token-exchange trigger.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**type:** `TokenExchangeProfileTypeEnum` 
     
 </dd>
 </dl>
@@ -12000,7 +13097,7 @@ client.sessions().update(
 </dl>
 </details>
 
-<details><summary><code>client.sessions.revoke(id)</code></summary>
+<details><summary><code>client.tokenExchangeProfiles.get(id) -> GetTokenExchangeProfileResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -12012,7 +13109,9 @@ client.sessions().update(
 <dl>
 <dd>
 
-Revokes a session by ID and all associated refresh tokens.
+Retrieve details about a single Token Exchange Profile specified by ID.
+
+By using this feature, you agree to the applicable Free Trial terms in [Okta’s Master Subscription Agreement](https://www.okta.com/legal/). It is your responsibility to securely validate the user’s subject_token. See [User Guide](https://auth0.com/docs/authenticate/custom-token-exchange) for more details.
 </dd>
 </dl>
 </dd>
@@ -12027,7 +13126,7 @@ Revokes a session by ID and all associated refresh tokens.
 <dd>
 
 ```java
-client.sessions().revoke("id");
+client.tokenExchangeProfiles().get("id");
 ```
 </dd>
 </dl>
@@ -12042,7 +13141,7 @@ client.sessions().revoke("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the session to revoke.
+**id:** `String` — ID of the Token Exchange Profile to retrieve.
     
 </dd>
 </dl>
@@ -12054,8 +13153,7 @@ client.sessions().revoke("id");
 </dl>
 </details>
 
-## Stats
-<details><summary><code>client.stats.getActiveUsersCount() -> Double</code></summary>
+<details><summary><code>client.tokenExchangeProfiles.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -12067,7 +13165,9 @@ client.sessions().revoke("id");
 <dl>
 <dd>
 
-Retrieve the number of active users that logged in during the last 30 days.
+Delete a Token Exchange Profile within your tenant.
+
+By using this feature, you agree to the applicable Free Trial terms in [Okta's Master Subscription Agreement](https://www.okta.com/legal/). It is your responsibility to securely validate the user's subject_token. See [User Guide](https://auth0.com/docs/authenticate/custom-token-exchange) for more details.
 </dd>
 </dl>
 </dd>
@@ -12082,19 +13182,34 @@ Retrieve the number of active users that logged in during the last 30 days.
 <dd>
 
 ```java
-client.stats().getActiveUsersCount();
+client.tokenExchangeProfiles().delete("id");
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` — ID of the Token Exchange Profile to delete.
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
 
 </dd>
 </dl>
 </details>
 
-<details><summary><code>client.stats.getDaily() -> List&amp;lt;DailyStats&amp;gt;</code></summary>
+<details><summary><code>client.tokenExchangeProfiles.update(id, request)</code></summary>
 <dl>
 <dd>
 
@@ -12106,7 +13221,9 @@ client.stats().getActiveUsersCount();
 <dl>
 <dd>
 
-Retrieve the number of logins, signups and breached-password detections (subscription required) that occurred each day within a specified date range.
+Update a Token Exchange Profile within your tenant.
+
+By using this feature, you agree to the applicable Free Trial terms in [Okta's Master Subscription Agreement](https://www.okta.com/legal/). It is your responsibility to securely validate the user's subject_token. See [User Guide](https://auth0.com/docs/authenticate/custom-token-exchange) for more details.
 </dd>
 </dl>
 </dd>
@@ -12121,11 +13238,10 @@ Retrieve the number of logins, signups and breached-password detections (subscri
 <dd>
 
 ```java
-client.stats().getDaily(
-    GetDailyStatsRequestParameters
+client.tokenExchangeProfiles().update(
+    "id",
+    UpdateTokenExchangeProfileRequestContent
         .builder()
-        .from("from")
-        .to("to")
         .build()
 );
 ```
@@ -12142,7 +13258,7 @@ client.stats().getDaily(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Optional first day of the date range (inclusive) in YYYYMMDD format.
+**id:** `String` — ID of the Token Exchange Profile to update.
     
 </dd>
 </dl>
@@ -12150,48 +13266,16 @@ client.stats().getDaily(
 <dl>
 <dd>
 
-**to:** `Optional<String>` — Optional last day of the date range (inclusive) in YYYYMMDD format.
+**name:** `Optional<String>` — Friendly name of this profile.
     
 </dd>
 </dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-## SupplementalSignals
-<details><summary><code>client.supplementalSignals.get() -> GetSupplementalSignalsResponseContent</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-Get the supplemental signals configuration for a tenant.
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### 🔌 Usage
-
-<dl>
-<dd>
 
 <dl>
 <dd>
 
-```java
-client.supplementalSignals().get();
-```
+**subjectTokenType:** `Optional<String>` — Subject token type for this profile. When receiving a token exchange request on the Authentication API, the corresponding token exchange profile with a matching subject_token_type will be executed. This must be a URI.
+    
 </dd>
 </dl>
 </dd>
@@ -12202,7 +13286,8 @@ client.supplementalSignals().get();
 </dl>
 </details>
 
-<details><summary><code>client.supplementalSignals.patch(request) -> PatchSupplementalSignalsResponseContent</code></summary>
+## UserAttributeProfiles
+<details><summary><code>client.userAttributeProfiles.list() -> SyncPagingIterable&amp;lt;UserAttributeProfile&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -12214,7 +13299,7 @@ client.supplementalSignals().get();
 <dl>
 <dd>
 
-Update the supplemental signals configuration for a tenant.
+Retrieve a list of User Attribute Profiles. This endpoint supports Checkpoint pagination.
 </dd>
 </dl>
 </dd>
@@ -12229,10 +13314,11 @@ Update the supplemental signals configuration for a tenant.
 <dd>
 
 ```java
-client.supplementalSignals().patch(
-    UpdateSupplementalSignalsRequestContent
+client.userAttributeProfiles().list(
+    ListUserAttributeProfileRequestParameters
         .builder()
-        .akamaiEnabled(true)
+        .from("from")
+        .take(1)
         .build()
 );
 ```
@@ -12249,7 +13335,15 @@ client.supplementalSignals().patch(
 <dl>
 <dd>
 
-**akamaiEnabled:** `Boolean` — Indicates if incoming Akamai Headers should be processed
+**from:** `Optional<String>` — Optional Id from which to start selection.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 5.
     
 </dd>
 </dl>
@@ -12261,8 +13355,7 @@ client.supplementalSignals().patch(
 </dl>
 </details>
 
-## Tickets
-<details><summary><code>client.tickets.verifyEmail(request) -> VerifyEmailTicketResponseContent</code></summary>
+<details><summary><code>client.userAttributeProfiles.create(request) -> CreateUserAttributeProfileResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -12274,7 +13367,7 @@ client.supplementalSignals().patch(
 <dl>
 <dd>
 
-Create an email verification ticket for a given user. An email verification ticket is a generated URL that the user can consume to verify their email address.
+Create a User Attribute Profile.
 </dd>
 </dl>
 </dd>
@@ -12289,10 +13382,21 @@ Create an email verification ticket for a given user. An email verification tick
 <dd>
 
 ```java
-client.tickets().verifyEmail(
-    VerifyEmailTicketRequestContent
+client.userAttributeProfiles().create(
+    CreateUserAttributeProfileRequestContent
         .builder()
-        .userId("user_id")
+        .name("name")
+        .userAttributes(
+            new HashMap<String, UserAttributeProfileUserAttributeAdditionalProperties>() {{
+                put("key", UserAttributeProfileUserAttributeAdditionalProperties
+                    .builder()
+                    .description("description")
+                    .label("label")
+                    .profileRequired(true)
+                    .auth0Mapping("auth0_mapping")
+                    .build());
+            }}
+        )
         .build()
 );
 ```
@@ -12309,7 +13413,7 @@ client.tickets().verifyEmail(
 <dl>
 <dd>
 
-**resultUrl:** `Optional<String>` — URL the user will be redirected to in the classic Universal Login experience once the ticket is used. Cannot be specified when using client_id or organization_id.
+**name:** `String` 
     
 </dd>
 </dl>
@@ -12317,7 +13421,7 @@ client.tickets().verifyEmail(
 <dl>
 <dd>
 
-**userId:** `String` — user_id of for whom the ticket should be created.
+**userId:** `Optional<UserAttributeProfileUserId>` 
     
 </dd>
 </dl>
@@ -12325,40 +13429,47 @@ client.tickets().verifyEmail(
 <dl>
 <dd>
 
-**clientId:** `Optional<String>` — ID of the client (application). If provided for tenants using the New Universal Login experience, the email template and UI displays application details, and the user is prompted to redirect to the application's <a target='' href='https://auth0.com/docs/authenticate/login/auth0-universal-login/configure-default-login-routes#completing-the-password-reset-flow'>default login route</a> after the ticket is used. client_id is required to use the <a target='' href='https://auth0.com/docs/customize/actions/flows-and-triggers/post-change-password-flow'>Password Reset Post Challenge</a> trigger.
+**userAttributes:** `Map<String, UserAttributeProfileUserAttributeAdditionalProperties>` 
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**organizationId:** `Optional<String>` — (Optional) Organization ID – the ID of the Organization. If provided, organization parameters will be made available to the email template and organization branding will be applied to the prompt. In addition, the redirect link in the prompt will include organization_id and organization_name query string parameters.
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.userAttributeProfiles.listTemplates() -> ListUserAttributeProfileTemplateResponseContent</code></summary>
 <dl>
 <dd>
 
-**ttlSec:** `Optional<Integer>` — Number of seconds for which the ticket is valid before expiration. If unspecified or set to 0, this value defaults to 432000 seconds (5 days).
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**includeEmailInRedirect:** `Optional<Boolean>` — Whether to include the email address as part of the returnUrl in the reset_email (true), or not (false).
-    
+<dl>
+<dd>
+
+Retrieve a list of User Attribute Profile Templates.
 </dd>
 </dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
 
 <dl>
 <dd>
 
-**identity:** `Optional<Identity>` 
-    
+<dl>
+<dd>
+
+```java
+client.userAttributeProfiles().listTemplates();
+```
 </dd>
 </dl>
 </dd>
@@ -12369,7 +13480,7 @@ client.tickets().verifyEmail(
 </dl>
 </details>
 
-<details><summary><code>client.tickets.changePassword(request) -> ChangePasswordTicketResponseContent</code></summary>
+<details><summary><code>client.userAttributeProfiles.getTemplate(id) -> GetUserAttributeProfileTemplateResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -12381,9 +13492,7 @@ client.tickets().verifyEmail(
 <dl>
 <dd>
 
-Create a password change ticket for a given user. A password change ticket is a generated URL that the user can consume to start a reset password flow.
-
-Note: This endpoint does not verify the given user’s identity. If you call this endpoint within your application, you must design your application to verify the user’s identity.
+Retrieve a User Attribute Profile Template.
 </dd>
 </dl>
 </dd>
@@ -12398,11 +13507,7 @@ Note: This endpoint does not verify the given user’s identity. If you call thi
 <dd>
 
 ```java
-client.tickets().changePassword(
-    ChangePasswordTicketRequestContent
-        .builder()
-        .build()
-);
+client.userAttributeProfiles().getTemplate("id");
 ```
 </dd>
 </dl>
@@ -12417,79 +13522,61 @@ client.tickets().changePassword(
 <dl>
 <dd>
 
-**resultUrl:** `Optional<String>` — URL the user will be redirected to in the classic Universal Login experience once the ticket is used. Cannot be specified when using organization_id. May be specified together with client_id when the tenant has a custom password reset page enabled and a password-reset-post-challenge Action bound.
+**id:** `String` — ID of the user-attribute-profile-template to retrieve.
     
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**userId:** `Optional<String>` — user_id of for whom the ticket should be created.
-    
 </dd>
 </dl>
 
-<dl>
-<dd>
 
-**clientId:** `Optional<String>` — ID of the client (application). If provided for tenants using the New Universal Login experience, the email template and UI displays application details, and the user is prompted to redirect to the application's <a target='' href='https://auth0.com/docs/authenticate/login/auth0-universal-login/configure-default-login-routes#completing-the-password-reset-flow'>default login route</a> after the ticket is used. client_id is required to use the <a target='' href='https://auth0.com/docs/customize/actions/flows-and-triggers/post-change-password-flow'>Password Reset Post Challenge</a> trigger.
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.userAttributeProfiles.get(id) -> GetUserAttributeProfileResponseContent</code></summary>
 <dl>
 <dd>
 
-**organizationId:** `Optional<String>` — (Optional) Organization ID – the ID of the Organization. If provided, organization parameters will be made available to the email template and organization branding will be applied to the prompt. In addition, the redirect link in the prompt will include organization_id and organization_name query string parameters.
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**connectionId:** `Optional<String>` — ID of the connection. If provided, allows the user to be specified using email instead of user_id. If you set this value, you must also send the email parameter. You cannot send user_id when specifying a connection_id.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**email:** `Optional<String>` — Email address of the user for whom the tickets should be created. Requires the connection_id parameter. Cannot be specified when using user_id.
-    
+Retrieve details about a single User Attribute Profile specified by ID.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**ttlSec:** `Optional<Integer>` — Number of seconds for which the ticket is valid before expiration. If unspecified or set to 0, this value defaults to 432000 seconds (5 days).
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**markEmailAsVerified:** `Optional<Boolean>` — Whether to set the email_verified attribute to true (true) or whether it should not be updated (false).
-    
+```java
+client.userAttributeProfiles().get("id");
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**includeEmailInRedirect:** `Optional<Boolean>` — Whether to include the email address as part of the returnUrl in the reset_email (true), or not (false).
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**identity:** `Optional<ChangePasswordTicketIdentity>` 
+**id:** `String` — ID of the user-attribute-profile to retrieve.
     
 </dd>
 </dl>
@@ -12501,8 +13588,7 @@ client.tickets().changePassword(
 </dl>
 </details>
 
-## TokenExchangeProfiles
-<details><summary><code>client.tokenExchangeProfiles.list() -> SyncPagingIterable&amp;lt;TokenExchangeProfileResponseContent&amp;gt;</code></summary>
+<details><summary><code>client.userAttributeProfiles.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -12514,16 +13600,7 @@ client.tickets().changePassword(
 <dl>
 <dd>
 
-Retrieve a list of all Token Exchange Profiles available in your tenant.
-
-By using this feature, you agree to the applicable Free Trial terms in [Okta’s Master Subscription Agreement](https://www.okta.com/legal/). It is your responsibility to securely validate the user’s subject_token. See [User Guide](https://auth0.com/docs/authenticate/custom-token-exchange) for more details.
-
-This endpoint supports Checkpoint pagination. To search by checkpoint, use the following parameters:
-
-- `from`: Optional id from which to start selection.
-- `take`: The total amount of entries to retrieve when using the from parameter. Defaults to 50.
-
-**Note**: The first time you call this endpoint using checkpoint pagination, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no pages are remaining.
+Delete a single User Attribute Profile specified by ID.
 </dd>
 </dl>
 </dd>
@@ -12538,13 +13615,7 @@ This endpoint supports Checkpoint pagination. To search by checkpoint, use the f
 <dd>
 
 ```java
-client.tokenExchangeProfiles().list(
-    TokenExchangeProfilesListRequest
-        .builder()
-        .from("from")
-        .take(1)
-        .build()
-);
+client.userAttributeProfiles().delete("id");
 ```
 </dd>
 </dl>
@@ -12559,15 +13630,7 @@ client.tokenExchangeProfiles().list(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Optional Id from which to start selection.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+**id:** `String` — ID of the user-attribute-profile to delete.
     
 </dd>
 </dl>
@@ -12579,7 +13642,7 @@ client.tokenExchangeProfiles().list(
 </dl>
 </details>
 
-<details><summary><code>client.tokenExchangeProfiles.create(request) -> CreateTokenExchangeProfileResponseContent</code></summary>
+<details><summary><code>client.userAttributeProfiles.update(id, request) -> UpdateUserAttributeProfileResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -12591,9 +13654,7 @@ client.tokenExchangeProfiles().list(
 <dl>
 <dd>
 
-Create a new Token Exchange Profile within your tenant.
-
-By using this feature, you agree to the applicable Free Trial terms in [Okta’s Master Subscription Agreement](https://www.okta.com/legal/). It is your responsibility to securely validate the user’s subject_token. See [User Guide](https://auth0.com/docs/authenticate/custom-token-exchange) for more details.
+Update the details of a specific User attribute profile, such as name, user_id and user_attributes.
 </dd>
 </dl>
 </dd>
@@ -12608,13 +13669,10 @@ By using this feature, you agree to the applicable Free Trial terms in [Okta’s
 <dd>
 
 ```java
-client.tokenExchangeProfiles().create(
-    CreateTokenExchangeProfileRequestContent
+client.userAttributeProfiles().update(
+    "id",
+    UpdateUserAttributeProfileRequestContent
         .builder()
-        .name("name")
-        .subjectTokenType("subject_token_type")
-        .actionId("action_id")
-        .type(TokenExchangeProfileTypeEnum.CUSTOM_AUTHENTICATION)
         .build()
 );
 ```
@@ -12631,7 +13689,7 @@ client.tokenExchangeProfiles().create(
 <dl>
 <dd>
 
-**name:** `String` — Friendly name of this profile.
+**id:** `String` — ID of the user attribute profile to update.
     
 </dd>
 </dl>
@@ -12639,7 +13697,7 @@ client.tokenExchangeProfiles().create(
 <dl>
 <dd>
 
-**subjectTokenType:** `String` — Subject token type for this profile. When receiving a token exchange request on the Authentication API, the corresponding token exchange profile with a matching subject_token_type will be executed. This must be a URI.
+**name:** `Optional<String>` 
     
 </dd>
 </dl>
@@ -12647,7 +13705,7 @@ client.tokenExchangeProfiles().create(
 <dl>
 <dd>
 
-**actionId:** `String` — The ID of the Custom Token Exchange action to execute for this profile, in order to validate the subject_token. The action must use the custom-token-exchange trigger.
+**userId:** `Optional<UserAttributeProfileUserId>` 
     
 </dd>
 </dl>
@@ -12655,7 +13713,7 @@ client.tokenExchangeProfiles().create(
 <dl>
 <dd>
 
-**type:** `TokenExchangeProfileTypeEnum` 
+**userAttributes:** `Optional<Map<String, UserAttributeProfileUserAttributeAdditionalProperties>>` 
     
 </dd>
 </dl>
@@ -12667,7 +13725,8 @@ client.tokenExchangeProfiles().create(
 </dl>
 </details>
 
-<details><summary><code>client.tokenExchangeProfiles.get(id) -> GetTokenExchangeProfileResponseContent</code></summary>
+## UserBlocks
+<details><summary><code>client.userBlocks.listByIdentifier() -> ListUserBlocksByIdentifierResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -12679,9 +13738,7 @@ client.tokenExchangeProfiles().create(
 <dl>
 <dd>
 
-Retrieve details about a single Token Exchange Profile specified by ID.
-
-By using this feature, you agree to the applicable Free Trial terms in [Okta’s Master Subscription Agreement](https://www.okta.com/legal/). It is your responsibility to securely validate the user’s subject_token. See [User Guide](https://auth0.com/docs/authenticate/custom-token-exchange) for more details.
+Retrieve details of all [Brute-force Protection](https://auth0.com/docs/secure/attack-protection/brute-force-protection) blocks for a user with the given identifier (username, phone number, or email).
 </dd>
 </dl>
 </dd>
@@ -12696,7 +13753,13 @@ By using this feature, you agree to the applicable Free Trial terms in [Okta’s
 <dd>
 
 ```java
-client.tokenExchangeProfiles().get("id");
+client.userBlocks().listByIdentifier(
+    ListUserBlocksByIdentifierRequestParameters
+        .builder()
+        .identifier("identifier")
+        .considerBruteForceEnablement(true)
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -12711,7 +13774,20 @@ client.tokenExchangeProfiles().get("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the Token Exchange Profile to retrieve.
+**identifier:** `String` — Should be any of a username, phone number, or email.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**considerBruteForceEnablement:** `Optional<Boolean>` 
+
+
+          If true and Brute Force Protection is enabled and configured to block logins, will return a list of blocked IP addresses.
+          If true and Brute Force Protection is disabled, will return an empty list.
+        
     
 </dd>
 </dl>
@@ -12723,7 +13799,7 @@ client.tokenExchangeProfiles().get("id");
 </dl>
 </details>
 
-<details><summary><code>client.tokenExchangeProfiles.delete(id)</code></summary>
+<details><summary><code>client.userBlocks.deleteByIdentifier()</code></summary>
 <dl>
 <dd>
 
@@ -12735,9 +13811,9 @@ client.tokenExchangeProfiles().get("id");
 <dl>
 <dd>
 
-Delete a Token Exchange Profile within your tenant.
+Remove all [Brute-force Protection](https://auth0.com/docs/secure/attack-protection/brute-force-protection) blocks for the user with the given identifier (username, phone number, or email).
 
-By using this feature, you agree to the applicable Free Trial terms in [Okta's Master Subscription Agreement](https://www.okta.com/legal/). It is your responsibility to securely validate the user's subject_token. See [User Guide](https://auth0.com/docs/authenticate/custom-token-exchange) for more details.
+Note: This endpoint does not unblock users that were [blocked by a tenant administrator](https://auth0.com/docs/user-profile#block-and-unblock-a-user).
 </dd>
 </dl>
 </dd>
@@ -12752,7 +13828,12 @@ By using this feature, you agree to the applicable Free Trial terms in [Okta's M
 <dd>
 
 ```java
-client.tokenExchangeProfiles().delete("id");
+client.userBlocks().deleteByIdentifier(
+    DeleteUserBlocksByIdentifierRequestParameters
+        .builder()
+        .identifier("identifier")
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -12767,7 +13848,7 @@ client.tokenExchangeProfiles().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the Token Exchange Profile to delete.
+**identifier:** `String` — Should be any of a username, phone number, or email.
     
 </dd>
 </dl>
@@ -12779,7 +13860,7 @@ client.tokenExchangeProfiles().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.tokenExchangeProfiles.update(id, request)</code></summary>
+<details><summary><code>client.userBlocks.list(id) -> ListUserBlocksResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -12791,9 +13872,7 @@ client.tokenExchangeProfiles().delete("id");
 <dl>
 <dd>
 
-Update a Token Exchange Profile within your tenant.
-
-By using this feature, you agree to the applicable Free Trial terms in [Okta's Master Subscription Agreement](https://www.okta.com/legal/). It is your responsibility to securely validate the user's subject_token. See [User Guide](https://auth0.com/docs/authenticate/custom-token-exchange) for more details.
+Retrieve details of all [Brute-force Protection](https://auth0.com/docs/secure/attack-protection/brute-force-protection) blocks for the user with the given ID.
 </dd>
 </dl>
 </dd>
@@ -12808,10 +13887,11 @@ By using this feature, you agree to the applicable Free Trial terms in [Okta's M
 <dd>
 
 ```java
-client.tokenExchangeProfiles().update(
+client.userBlocks().list(
     "id",
-    UpdateTokenExchangeProfileRequestContent
+    ListUserBlocksRequestParameters
         .builder()
+        .considerBruteForceEnablement(true)
         .build()
 );
 ```
@@ -12828,7 +13908,7 @@ client.tokenExchangeProfiles().update(
 <dl>
 <dd>
 
-**id:** `String` — ID of the Token Exchange Profile to update.
+**id:** `String` — user_id of the user blocks to retrieve.
     
 </dd>
 </dl>
@@ -12836,15 +13916,12 @@ client.tokenExchangeProfiles().update(
 <dl>
 <dd>
 
-**name:** `Optional<String>` — Friendly name of this profile.
-    
-</dd>
-</dl>
+**considerBruteForceEnablement:** `Optional<Boolean>` 
 
-<dl>
-<dd>
 
-**subjectTokenType:** `Optional<String>` — Subject token type for this profile. When receiving a token exchange request on the Authentication API, the corresponding token exchange profile with a matching subject_token_type will be executed. This must be a URI.
+          If true and Brute Force Protection is enabled and configured to block logins, will return a list of blocked IP addresses.
+          If true and Brute Force Protection is disabled, will return an empty list.
+        
     
 </dd>
 </dl>
@@ -12856,8 +13933,7 @@ client.tokenExchangeProfiles().update(
 </dl>
 </details>
 
-## UserAttributeProfiles
-<details><summary><code>client.userAttributeProfiles.list() -> SyncPagingIterable&amp;lt;UserAttributeProfile&amp;gt;</code></summary>
+<details><summary><code>client.userBlocks.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -12869,7 +13945,9 @@ client.tokenExchangeProfiles().update(
 <dl>
 <dd>
 
-Retrieve a list of User Attribute Profiles. This endpoint supports Checkpoint pagination.
+Remove all [Brute-force Protection](https://auth0.com/docs/secure/attack-protection/brute-force-protection) blocks for the user with the given ID.
+
+Note: This endpoint does not unblock users that were [blocked by a tenant administrator](https://auth0.com/docs/user-profile#block-and-unblock-a-user).
 </dd>
 </dl>
 </dd>
@@ -12884,13 +13962,7 @@ Retrieve a list of User Attribute Profiles. This endpoint supports Checkpoint pa
 <dd>
 
 ```java
-client.userAttributeProfiles().list(
-    ListUserAttributeProfileRequestParameters
-        .builder()
-        .from("from")
-        .take(1)
-        .build()
-);
+client.userBlocks().delete("id");
 ```
 </dd>
 </dl>
@@ -12905,15 +13977,7 @@ client.userAttributeProfiles().list(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Optional Id from which to start selection.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**take:** `Optional<Integer>` — Number of results per page. Defaults to 5.
+**id:** `String` — The user_id of the user to update.
     
 </dd>
 </dl>
@@ -12925,7 +13989,8 @@ client.userAttributeProfiles().list(
 </dl>
 </details>
 
-<details><summary><code>client.userAttributeProfiles.create(request) -> CreateUserAttributeProfileResponseContent</code></summary>
+## Users
+<details><summary><code>client.users.list() -> SyncPagingIterable&amp;lt;UserResponseSchema&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -12937,7 +14002,24 @@ client.userAttributeProfiles().list(
 <dl>
 <dd>
 
-Create a User Attribute Profile.
+Retrieve details of users. It is possible to:
+
+- Specify a search criteria for users
+- Sort the users to be returned
+- Select the fields to be returned
+- Specify the number of users to retrieve per page and the page index
+
+
+
+The `q` query parameter can be used to get users that match the specified criteria [using query string syntax.](https://auth0.com/docs/users/search/v3/query-syntax)
+
+[Learn more about searching for users.](https://auth0.com/docs/users/search/v3)
+
+Read about [best practices](https://auth0.com/docs/users/search/best-practices) when working with the API endpoints for retrieving users.
+
+
+
+Auth0 limits the number of users you can return. If you exceed this threshold, please redefine your search, use the [export job](https://auth0.com/docs/api/management/v2#!/Jobs/post_users_exports), or the [User Import / Export](https://auth0.com/docs/extensions/user-import-export) extension.
 </dd>
 </dl>
 </dd>
@@ -12952,21 +14034,19 @@ Create a User Attribute Profile.
 <dd>
 
 ```java
-client.userAttributeProfiles().create(
-    CreateUserAttributeProfileRequestContent
+client.users().list(
+    ListUsersRequestParameters
         .builder()
-        .name("name")
-        .userAttributes(
-            new HashMap<String, UserAttributeProfileUserAttributeAdditionalProperties>() {{
-                put("key", UserAttributeProfileUserAttributeAdditionalProperties
-                    .builder()
-                    .description("description")
-                    .label("label")
-                    .profileRequired(true)
-                    .auth0Mapping("auth0_mapping")
-                    .build());
-            }}
-        )
+        .page(1)
+        .perPage(1)
+        .includeTotals(true)
+        .sort("sort")
+        .connection("connection")
+        .fields("fields")
+        .includeFields(true)
+        .q("q")
+        .searchEngine(SearchEngineVersionsEnum.V1)
+        .primaryOrder(true)
         .build()
 );
 ```
@@ -12983,7 +14063,7 @@ client.userAttributeProfiles().create(
 <dl>
 <dd>
 
-**name:** `String` 
+**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
     
 </dd>
 </dl>
@@ -12991,7 +14071,7 @@ client.userAttributeProfiles().create(
 <dl>
 <dd>
 
-**userId:** `Optional<UserAttributeProfileUserId>` 
+**perPage:** `Optional<Integer>` — Number of results per page.
     
 </dd>
 </dl>
@@ -12999,47 +14079,64 @@ client.userAttributeProfiles().create(
 <dl>
 <dd>
 
-**userAttributes:** `Map<String, UserAttributeProfileUserAttributeAdditionalProperties>` 
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
+**sort:** `Optional<String>` — Field to sort by. Use <code>field:order</code> where order is <code>1</code> for ascending and <code>-1</code> for descending. e.g. <code>created_at:1</code>
+    
 </dd>
 </dl>
-</details>
 
-<details><summary><code>client.userAttributeProfiles.listTemplates() -> ListUserAttributeProfileTemplateResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+**connection:** `Optional<String>` — Connection filter. Only applies when using <code>search_engine=v1</code>. To filter by connection with <code>search_engine=v2|v3</code>, use <code>q=identities.connection:"connection_name"</code>
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-Retrieve a list of User Attribute Profile Templates.
+**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
+    
 </dd>
 </dl>
+
+<dl>
+<dd>
+
+**q:** `Optional<String>` — Query in <a target='_new' href ='https://lucene.apache.org/core/2_9_4/queryparsersyntax.html'>Lucene query string syntax</a>. Some query types cannot be used on metadata fields, for details see <a href='https://auth0.com/docs/users/search/v3/query-syntax#searchable-fields'>Searchable Fields</a>.
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
+**searchEngine:** `Optional<SearchEngineVersionsEnum>` — The version of the search engine
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-```java
-client.userAttributeProfiles().listTemplates();
-```
+**primaryOrder:** `Optional<Boolean>` — If true (default), results are returned in a deterministic order. If false, results may be returned in a non-deterministic order, which can enhance performance for complex queries targeting a small number of users. Set to false only when consistent ordering and pagination is not required.
+    
 </dd>
 </dl>
 </dd>
@@ -13050,7 +14147,7 @@ client.userAttributeProfiles().listTemplates();
 </dl>
 </details>
 
-<details><summary><code>client.userAttributeProfiles.getTemplate(id) -> GetUserAttributeProfileTemplateResponseContent</code></summary>
+<details><summary><code>client.users.create(request) -> CreateUserResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -13062,7 +14159,9 @@ client.userAttributeProfiles().listTemplates();
 <dl>
 <dd>
 
-Retrieve a User Attribute Profile Template.
+Create a new user for a given [database](https://auth0.com/docs/connections/database) or [passwordless](https://auth0.com/docs/connections/passwordless) connection.
+
+Note: `connection` is required but other parameters such as `email` and `password` are dependent upon the type of connection.
 </dd>
 </dl>
 </dd>
@@ -13077,7 +14176,12 @@ Retrieve a User Attribute Profile Template.
 <dd>
 
 ```java
-client.userAttributeProfiles().getTemplate("id");
+client.users().create(
+    CreateUserRequestContent
+        .builder()
+        .connection("connection")
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -13092,115 +14196,135 @@ client.userAttributeProfiles().getTemplate("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the user-attribute-profile-template to retrieve.
+**email:** `Optional<String>` — The user's email.
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
+**phoneNumber:** `Optional<String>` — The user's phone number (following the E.164 recommendation).
+    
 </dd>
 </dl>
-</details>
 
-<details><summary><code>client.userAttributeProfiles.get(id) -> GetUserAttributeProfileResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+**userMetadata:** `Optional<Map<String, Object>>` 
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**blocked:** `Optional<Boolean>` — Whether this user was blocked by an administrator (true) or not (false).
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-Retrieve details about a single User Attribute Profile specified by ID.
-</dd>
-</dl>
+**emailVerified:** `Optional<Boolean>` — Whether this email address is verified (true) or unverified (false). User will receive a verification email after creation if `email_verified` is false or not specified
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
+**phoneVerified:** `Optional<Boolean>` — Whether this phone number has been verified (true) or not (false).
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-```java
-client.userAttributeProfiles().get("id");
-```
-</dd>
-</dl>
+**appMetadata:** `Optional<Map<String, Object>>` 
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**givenName:** `Optional<String>` — The user's given name(s).
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**id:** `String` — ID of the user-attribute-profile to retrieve.
+**familyName:** `Optional<String>` — The user's family name(s).
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
+**name:** `Optional<String>` — The user's full name.
+    
 </dd>
 </dl>
-</details>
 
-<details><summary><code>client.userAttributeProfiles.delete(id)</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+**nickname:** `Optional<String>` — The user's nickname.
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**picture:** `Optional<String>` — A URI pointing to the user's picture.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-Delete a single User Attribute Profile specified by ID.
-</dd>
-</dl>
+**userId:** `Optional<String>` — The external user's id provided by the identity provider.
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
+**connection:** `String` — Name of the connection this user should be created in.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-```java
-client.userAttributeProfiles().delete("id");
-```
-</dd>
-</dl>
+**password:** `Optional<String>` — Initial password for this user. Only valid for auth0 connection strategy.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**verifyEmail:** `Optional<Boolean>` — Whether the user will receive a verification email after creation (true) or no email (false). Overrides behavior of `email_verified` parameter.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**id:** `String` — ID of the user-attribute-profile to delete.
+**username:** `Optional<String>` — The user's username. Only valid if the connection requires a username.
     
 </dd>
 </dl>
@@ -13212,7 +14336,7 @@ client.userAttributeProfiles().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.userAttributeProfiles.update(id, request) -> UpdateUserAttributeProfileResponseContent</code></summary>
+<details><summary><code>client.users.listUsersByEmail() -> List&amp;lt;UserResponseSchema&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -13224,7 +14348,11 @@ client.userAttributeProfiles().delete("id");
 <dl>
 <dd>
 
-Update the details of a specific User attribute profile, such as name, user_id and user_attributes.
+Find users by email. If Auth0 is the identity provider (idP), the email address associated with a user is saved in lower case, regardless of how you initially provided it. 
+
+For example, if you register a user as JohnSmith@example.com, Auth0 saves the user's email as johnsmith@example.com. 
+
+Therefore, when using this endpoint, make sure that you are searching for users via email addresses using the correct case.
 </dd>
 </dl>
 </dd>
@@ -13239,10 +14367,12 @@ Update the details of a specific User attribute profile, such as name, user_id a
 <dd>
 
 ```java
-client.userAttributeProfiles().update(
-    "id",
-    UpdateUserAttributeProfileRequestContent
+client.users().listUsersByEmail(
+    ListUsersByEmailRequestParameters
         .builder()
+        .email("email")
+        .fields("fields")
+        .includeFields(true)
         .build()
 );
 ```
@@ -13259,15 +14389,7 @@ client.userAttributeProfiles().update(
 <dl>
 <dd>
 
-**id:** `String` — ID of the user attribute profile to update.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**name:** `Optional<String>` 
+**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
     
 </dd>
 </dl>
@@ -13275,7 +14397,7 @@ client.userAttributeProfiles().update(
 <dl>
 <dd>
 
-**userId:** `Optional<UserAttributeProfileUserId>` 
+**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false). Defaults to true.
     
 </dd>
 </dl>
@@ -13283,7 +14405,7 @@ client.userAttributeProfiles().update(
 <dl>
 <dd>
 
-**userAttributes:** `Optional<Map<String, UserAttributeProfileUserAttributeAdditionalProperties>>` 
+**email:** `String` — Email address to search for (case-sensitive).
     
 </dd>
 </dl>
@@ -13295,8 +14417,7 @@ client.userAttributeProfiles().update(
 </dl>
 </details>
 
-## UserBlocks
-<details><summary><code>client.userBlocks.listByIdentifier() -> ListUserBlocksByIdentifierResponseContent</code></summary>
+<details><summary><code>client.users.get(id) -> GetUserResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -13308,7 +14429,7 @@ client.userAttributeProfiles().update(
 <dl>
 <dd>
 
-Retrieve details of all [Brute-force Protection](https://auth0.com/docs/secure/attack-protection/brute-force-protection) blocks for a user with the given identifier (username, phone number, or email).
+Retrieve user details. A list of fields to include or exclude may also be specified. For more information, see [Retrieve Users with the Get Users Endpoint](https://auth0.com/docs/manage-users/user-search/retrieve-users-with-get-users-endpoint).
 </dd>
 </dl>
 </dd>
@@ -13323,11 +14444,12 @@ Retrieve details of all [Brute-force Protection](https://auth0.com/docs/secure/a
 <dd>
 
 ```java
-client.userBlocks().listByIdentifier(
-    ListUserBlocksByIdentifierRequestParameters
+client.users().get(
+    "id",
+    GetUserRequestParameters
         .builder()
-        .identifier("identifier")
-        .considerBruteForceEnablement(true)
+        .fields("fields")
+        .includeFields(true)
         .build()
 );
 ```
@@ -13344,7 +14466,7 @@ client.userBlocks().listByIdentifier(
 <dl>
 <dd>
 
-**identifier:** `String` — Should be any of a username, phone number, or email.
+**id:** `String` — ID of the user to retrieve.
     
 </dd>
 </dl>
@@ -13352,12 +14474,15 @@ client.userBlocks().listByIdentifier(
 <dl>
 <dd>
 
-**considerBruteForceEnablement:** `Optional<Boolean>` 
+**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
+    
+</dd>
+</dl>
 
+<dl>
+<dd>
 
-          If true and Brute Force Protection is enabled and configured to block logins, will return a list of blocked IP addresses.
-          If true and Brute Force Protection is disabled, will return an empty list.
-        
+**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
     
 </dd>
 </dl>
@@ -13369,7 +14494,7 @@ client.userBlocks().listByIdentifier(
 </dl>
 </details>
 
-<details><summary><code>client.userBlocks.deleteByIdentifier()</code></summary>
+<details><summary><code>client.users.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -13381,9 +14506,7 @@ client.userBlocks().listByIdentifier(
 <dl>
 <dd>
 
-Remove all [Brute-force Protection](https://auth0.com/docs/secure/attack-protection/brute-force-protection) blocks for the user with the given identifier (username, phone number, or email).
-
-Note: This endpoint does not unblock users that were [blocked by a tenant administrator](https://auth0.com/docs/user-profile#block-and-unblock-a-user).
+Delete a user by user ID. This action cannot be undone. For Auth0 Dashboard instructions, see [Delete Users](https://auth0.com/docs/manage-users/user-accounts/delete-users).
 </dd>
 </dl>
 </dd>
@@ -13398,12 +14521,7 @@ Note: This endpoint does not unblock users that were [blocked by a tenant admini
 <dd>
 
 ```java
-client.userBlocks().deleteByIdentifier(
-    DeleteUserBlocksByIdentifierRequestParameters
-        .builder()
-        .identifier("identifier")
-        .build()
-);
+client.users().delete("id");
 ```
 </dd>
 </dl>
@@ -13418,7 +14536,7 @@ client.userBlocks().deleteByIdentifier(
 <dl>
 <dd>
 
-**identifier:** `String` — Should be any of a username, phone number, or email.
+**id:** `String` — ID of the user to delete.
     
 </dd>
 </dl>
@@ -13430,19 +14548,109 @@ client.userBlocks().deleteByIdentifier(
 </dl>
 </details>
 
-<details><summary><code>client.userBlocks.list(id) -> ListUserBlocksResponseContent</code></summary>
-<dl>
-<dd>
+<details><summary><code>client.users.update(id, request) -> UpdateUserResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Update a user.
+
+These are the attributes that can be updated at the root level:
+
+- app_metadata
+- blocked
+- email
+- email_verified
+- family_name
+- given_name
+- name
+- nickname
+- password
+- phone_number
+- phone_verified
+- picture
+- username
+- user_metadata
+- verify_email
+
+Some considerations:
+
+- The properties of the new object will replace the old ones.
+- The metadata fields are an exception to this rule (`user_metadata` and `app_metadata`). These properties are merged instead of being replaced but be careful, the merge only occurs on the first level.
+- If you are updating `email`, `email_verified`, `phone_number`, `phone_verified`, `username` or `password` of a secondary identity, you need to specify the `connection` property too.
+- If you are updating `email` or `phone_number` you can specify, optionally, the `client_id` property.
+- Updating `email_verified` is not supported for enterprise and passwordless sms connections.
+- Updating the `blocked` to `false` does not affect the user's blocked state from an excessive amount of incorrectly provided credentials. Use the "Unblock a user" endpoint from the "User Blocks" API to change the user's state.
+- Supported attributes can be unset by supplying `null` as the value.
+
+**Updating a field (non-metadata property)**
+
+To mark the email address of a user as verified, the body to send should be:
+
+```json
+{ "email_verified": true }
+```
+
+**Updating a user metadata root property**
+
+Let's assume that our test user has the following `user_metadata`:
+
+```json
+{ "user_metadata" : { "profileCode": 1479 } }
+```
+
+To add the field `addresses` the body to send should be:
+
+```json
+{ "user_metadata" : { "addresses": {"work_address": "100 Industrial Way"} }}
+```
+
+The modified object ends up with the following `user_metadata` property:
+
+```json
+{
+  "user_metadata": {
+    "profileCode": 1479,
+    "addresses": { "work_address": "100 Industrial Way" }
+  }
+}
+```
+
+**Updating an inner user metadata property**
 
-#### 📝 Description
+If there's existing user metadata to which we want to add  `"home_address": "742 Evergreen Terrace"` (using the `addresses` property) we should send the whole `addresses` object. Since this is a first-level object, the object will be merged in, but its own properties will not be. The body to send should be:
 
-<dl>
-<dd>
+```json
+{
+  "user_metadata": {
+    "addresses": {
+      "work_address": "100 Industrial Way",
+      "home_address": "742 Evergreen Terrace"
+    }
+  }
+}
+```
 
-<dl>
-<dd>
+The modified object ends up with the following `user_metadata` property:
 
-Retrieve details of all [Brute-force Protection](https://auth0.com/docs/secure/attack-protection/brute-force-protection) blocks for the user with the given ID.
+```json
+{
+  "user_metadata": {
+    "profileCode": 1479,
+    "addresses": {
+      "work_address": "100 Industrial Way",
+      "home_address": "742 Evergreen Terrace"
+    }
+  }
+}
+```
 </dd>
 </dl>
 </dd>
@@ -13457,11 +14665,10 @@ Retrieve details of all [Brute-force Protection](https://auth0.com/docs/secure/a
 <dd>
 
 ```java
-client.userBlocks().list(
+client.users().update(
     "id",
-    ListUserBlocksRequestParameters
+    UpdateUserRequestContent
         .builder()
-        .considerBruteForceEnablement(true)
         .build()
 );
 ```
@@ -13478,7 +14685,7 @@ client.userBlocks().list(
 <dl>
 <dd>
 
-**id:** `String` — user_id of the user blocks to retrieve.
+**id:** `String` — ID of the user to update.
     
 </dd>
 </dl>
@@ -13486,154 +14693,71 @@ client.userBlocks().list(
 <dl>
 <dd>
 
-**considerBruteForceEnablement:** `Optional<Boolean>` 
-
-
-          If true and Brute Force Protection is enabled and configured to block logins, will return a list of blocked IP addresses.
-          If true and Brute Force Protection is disabled, will return an empty list.
-        
+**blocked:** `Optional<Boolean>` — Whether this user was blocked by an administrator (true) or not (false).
     
 </dd>
 </dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.userBlocks.delete(id)</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
 
 <dl>
 <dd>
 
-<dl>
-<dd>
-
-Remove all [Brute-force Protection](https://auth0.com/docs/secure/attack-protection/brute-force-protection) blocks for the user with the given ID.
-
-Note: This endpoint does not unblock users that were [blocked by a tenant administrator](https://auth0.com/docs/user-profile#block-and-unblock-a-user).
-</dd>
-</dl>
+**emailVerified:** `Optional<Boolean>` — Whether this email address is verified (true) or unverified (false). If set to false the user will not receive a verification email unless `verify_email` is set to true.
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
-<dl>
-<dd>
-
-```java
-client.userBlocks().delete("id");
-```
-</dd>
-</dl>
+**email:** `Optional<String>` — Email address of this user.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
-<dl>
-<dd>
-
-**id:** `String` — The user_id of the user to update.
+**phoneNumber:** `Optional<String>` — The user's phone number (following the E.164 recommendation).
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
+**phoneVerified:** `Optional<Boolean>` — Whether this phone number has been verified (true) or not (false).
+    
 </dd>
 </dl>
-</details>
 
-## Users
-<details><summary><code>client.users.list() -> SyncPagingIterable&amp;lt;UserResponseSchema&amp;gt;</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
-
-<dl>
-<dd>
+**userMetadata:** `Optional<Map<String, Object>>` — User metadata to which this user has read/write access.
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
-Retrieve details of users. It is possible to:
-
-- Specify a search criteria for users
-- Sort the users to be returned
-- Select the fields to be returned
-- Specify the number of users to retrieve per page and the page index
-
-
-
-The `q` query parameter can be used to get users that match the specified criteria [using query string syntax.](https://auth0.com/docs/users/search/v3/query-syntax)
-
-[Learn more about searching for users.](https://auth0.com/docs/users/search/v3)
-
-Read about [best practices](https://auth0.com/docs/users/search/best-practices) when working with the API endpoints for retrieving users.
-
-
-
-Auth0 limits the number of users you can return. If you exceed this threshold, please redefine your search, use the [export job](https://auth0.com/docs/api/management/v2#!/Jobs/post_users_exports), or the [User Import / Export](https://auth0.com/docs/extensions/user-import-export) extension.
-</dd>
-</dl>
+**appMetadata:** `Optional<Map<String, Object>>` — User metadata to which this user has read-only access.
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-```java
-client.users().list(
-    ListUsersRequestParameters
-        .builder()
-        .page(1)
-        .perPage(1)
-        .includeTotals(true)
-        .sort("sort")
-        .connection("connection")
-        .fields("fields")
-        .includeFields(true)
-        .q("q")
-        .searchEngine(SearchEngineVersionsEnum.V1)
-        .primaryOrder(true)
-        .build()
-);
-```
-</dd>
-</dl>
+**givenName:** `Optional<String>` — Given name/first name/forename of this user.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
-<dl>
-<dd>
-
-**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
+**familyName:** `Optional<String>` — Family name/last name/surname of this user.
     
 </dd>
 </dl>
@@ -13641,7 +14765,7 @@ client.users().list(
 <dl>
 <dd>
 
-**perPage:** `Optional<Integer>` — Number of results per page.
+**name:** `Optional<String>` — Name of this user.
     
 </dd>
 </dl>
@@ -13649,7 +14773,7 @@ client.users().list(
 <dl>
 <dd>
 
-**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+**nickname:** `Optional<String>` — Preferred nickname or alias of this user.
     
 </dd>
 </dl>
@@ -13657,7 +14781,7 @@ client.users().list(
 <dl>
 <dd>
 
-**sort:** `Optional<String>` — Field to sort by. Use <code>field:order</code> where order is <code>1</code> for ascending and <code>-1</code> for descending. e.g. <code>created_at:1</code>
+**picture:** `Optional<String>` — URL to picture, photo, or avatar of this user.
     
 </dd>
 </dl>
@@ -13665,7 +14789,7 @@ client.users().list(
 <dl>
 <dd>
 
-**connection:** `Optional<String>` — Connection filter. Only applies when using <code>search_engine=v1</code>. To filter by connection with <code>search_engine=v2|v3</code>, use <code>q=identities.connection:"connection_name"</code>
+**verifyEmail:** `Optional<Boolean>` — Whether this user will receive a verification email after creation (true) or no email (false). Overrides behavior of `email_verified` parameter.
     
 </dd>
 </dl>
@@ -13673,7 +14797,7 @@ client.users().list(
 <dl>
 <dd>
 
-**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
+**verifyPhoneNumber:** `Optional<Boolean>` — Whether this user will receive a text after changing the phone number (true) or no text (false). Only valid when changing phone number for SMS connections.
     
 </dd>
 </dl>
@@ -13681,7 +14805,7 @@ client.users().list(
 <dl>
 <dd>
 
-**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
+**password:** `Optional<String>` — New password for this user. Only valid for database connections.
     
 </dd>
 </dl>
@@ -13689,7 +14813,7 @@ client.users().list(
 <dl>
 <dd>
 
-**q:** `Optional<String>` — Query in <a target='_new' href ='https://lucene.apache.org/core/2_9_4/queryparsersyntax.html'>Lucene query string syntax</a>. Some query types cannot be used on metadata fields, for details see <a href='https://auth0.com/docs/users/search/v3/query-syntax#searchable-fields'>Searchable Fields</a>.
+**connection:** `Optional<String>` — Name of the connection to target for this user update.
     
 </dd>
 </dl>
@@ -13697,7 +14821,7 @@ client.users().list(
 <dl>
 <dd>
 
-**searchEngine:** `Optional<SearchEngineVersionsEnum>` — The version of the search engine
+**clientId:** `Optional<String>` — Auth0 client ID. Only valid when updating email address.
     
 </dd>
 </dl>
@@ -13705,7 +14829,7 @@ client.users().list(
 <dl>
 <dd>
 
-**primaryOrder:** `Optional<Boolean>` — If true (default), results are returned in a deterministic order. If false, results may be returned in a non-deterministic order, which can enhance performance for complex queries targeting a small number of users. Set to false only when consistent ordering and pagination is not required.
+**username:** `Optional<String>` — The user's username. Only valid if the connection requires a username.
     
 </dd>
 </dl>
@@ -13717,7 +14841,7 @@ client.users().list(
 </dl>
 </details>
 
-<details><summary><code>client.users.create(request) -> CreateUserResponseContent</code></summary>
+<details><summary><code>client.users.regenerateRecoveryCode(id) -> RegenerateUsersRecoveryCodeResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -13729,9 +14853,7 @@ client.users().list(
 <dl>
 <dd>
 
-Create a new user for a given [database](https://auth0.com/docs/connections/database) or [passwordless](https://auth0.com/docs/connections/passwordless) connection.
-
-Note: `connection` is required but other parameters such as `email` and `password` are dependent upon the type of connection.
+Remove an existing multi-factor authentication (MFA) [recovery code](https://auth0.com/docs/secure/multi-factor-authentication/reset-user-mfa) and generate a new one. If a user cannot access the original device or account used for MFA enrollment, they can use a recovery code to authenticate.
 </dd>
 </dl>
 </dd>
@@ -13746,12 +14868,7 @@ Note: `connection` is required but other parameters such as `email` and `passwor
 <dd>
 
 ```java
-client.users().create(
-    CreateUserRequestContent
-        .builder()
-        .connection("connection")
-        .build()
-);
+client.users().regenerateRecoveryCode("id");
 ```
 </dd>
 </dl>
@@ -13766,47 +14883,66 @@ client.users().create(
 <dl>
 <dd>
 
-**email:** `Optional<String>` — The user's email.
+**id:** `String` — ID of the user to regenerate a multi-factor authentication recovery code for.
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**phoneNumber:** `Optional<String>` — The user's phone number (following the E.164 recommendation).
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.users.revokeAccess(id, request)</code></summary>
 <dl>
 <dd>
 
-**userMetadata:** `Optional<Map<String, Object>>` 
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**blocked:** `Optional<Boolean>` — Whether this user was blocked by an administrator (true) or not (false).
-    
+<dl>
+<dd>
+
+Revokes selected resources related to a user (sessions, refresh tokens, ...).
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**emailVerified:** `Optional<Boolean>` — Whether this email address is verified (true) or unverified (false). User will receive a verification email after creation if `email_verified` is false or not specified
-    
+<dl>
+<dd>
+
+```java
+client.users().revokeAccess(
+    "id",
+    RevokeUserAccessRequestContent
+        .builder()
+        .build()
+);
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**phoneVerified:** `Optional<Boolean>` — Whether this phone number has been verified (true) or not (false).
+<dl>
+<dd>
+
+**id:** `String` — ID of the user.
     
 </dd>
 </dl>
@@ -13814,7 +14950,7 @@ client.users().create(
 <dl>
 <dd>
 
-**appMetadata:** `Optional<Map<String, Object>>` 
+**sessionId:** `Optional<String>` — ID of the session to revoke.
     
 </dd>
 </dl>
@@ -13822,63 +14958,69 @@ client.users().create(
 <dl>
 <dd>
 
-**givenName:** `Optional<String>` — The user's given name(s).
+**preserveRefreshTokens:** `Optional<Boolean>` — Whether to preserve the refresh tokens associated with the session.
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**familyName:** `Optional<String>` — The user's family name(s).
-    
 </dd>
 </dl>
+</details>
+
+## Actions Versions
+<details><summary><code>client.actions.versions.list(actionId) -> SyncPagingIterable&amp;lt;ActionVersion&amp;gt;</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
 
 <dl>
 <dd>
 
-**name:** `Optional<String>` — The user's full name.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**nickname:** `Optional<String>` — The user's nickname.
-    
+Retrieve all of an action's versions. An action version is created whenever an action is deployed. An action version is immutable, once created.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**picture:** `Optional<String>` — A URI pointing to the user's picture.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**userId:** `Optional<String>` — The external user's id provided by the identity provider.
-    
+```java
+client.actions().versions().list(
+    "actionId",
+    ListActionVersionsRequestParameters
+        .builder()
+        .page(1)
+        .perPage(1)
+        .build()
+);
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**connection:** `String` — Name of the connection this user should be created in.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**password:** `Optional<String>` — Initial password for this user. Only valid for auth0 connection strategy.
+**actionId:** `String` — The ID of the action.
     
 </dd>
 </dl>
@@ -13886,7 +15028,7 @@ client.users().create(
 <dl>
 <dd>
 
-**verifyEmail:** `Optional<Boolean>` — Whether the user will receive a verification email after creation (true) or no email (false). Overrides behavior of `email_verified` parameter.
+**page:** `Optional<Integer>` — Use this field to request a specific page of the list results.
     
 </dd>
 </dl>
@@ -13894,7 +15036,7 @@ client.users().create(
 <dl>
 <dd>
 
-**username:** `Optional<String>` — The user's username. Only valid if the connection requires a username.
+**perPage:** `Optional<Integer>` — This field specify the maximum number of results to be returned by the server. 20 by default
     
 </dd>
 </dl>
@@ -13906,7 +15048,7 @@ client.users().create(
 </dl>
 </details>
 
-<details><summary><code>client.users.listUsersByEmail() -> List&amp;lt;UserResponseSchema&amp;gt;</code></summary>
+<details><summary><code>client.actions.versions.get(actionId, id) -> GetActionVersionResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -13918,11 +15060,7 @@ client.users().create(
 <dl>
 <dd>
 
-Find users by email. If Auth0 is the identity provider (idP), the email address associated with a user is saved in lower case, regardless of how you initially provided it. 
-
-For example, if you register a user as JohnSmith@example.com, Auth0 saves the user's email as johnsmith@example.com. 
-
-Therefore, when using this endpoint, make sure that you are searching for users via email addresses using the correct case.
+Retrieve a specific version of an action. An action version is created whenever an action is deployed. An action version is immutable, once created.
 </dd>
 </dl>
 </dd>
@@ -13937,14 +15075,7 @@ Therefore, when using this endpoint, make sure that you are searching for users
 <dd>
 
 ```java
-client.users().listUsersByEmail(
-    ListUsersByEmailRequestParameters
-        .builder()
-        .email("email")
-        .fields("fields")
-        .includeFields(true)
-        .build()
-);
+client.actions().versions().get("actionId", "id");
 ```
 </dd>
 </dl>
@@ -13959,15 +15090,7 @@ client.users().listUsersByEmail(
 <dl>
 <dd>
 
-**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false). Defaults to true.
+**actionId:** `String` — The ID of the action.
     
 </dd>
 </dl>
@@ -13975,7 +15098,7 @@ client.users().listUsersByEmail(
 <dl>
 <dd>
 
-**email:** `String` — Email address to search for (case-sensitive).
+**id:** `String` — The ID of the action version.
     
 </dd>
 </dl>
@@ -13987,7 +15110,7 @@ client.users().listUsersByEmail(
 </dl>
 </details>
 
-<details><summary><code>client.users.get(id) -> GetUserResponseContent</code></summary>
+<details><summary><code>client.actions.versions.deploy(actionId, id, request) -> DeployActionVersionResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -13999,7 +15122,7 @@ client.users().listUsersByEmail(
 <dl>
 <dd>
 
-Retrieve user details. A list of fields to include or exclude may also be specified. For more information, see [Retrieve Users with the Get Users Endpoint](https://auth0.com/docs/manage-users/user-search/retrieve-users-with-get-users-endpoint).
+Performs the equivalent of a roll-back of an action to an earlier, specified version. Creates a new, deployed action version that is identical to the specified version. If this action is currently bound to a trigger, the system will begin executing the newly-created version immediately.
 </dd>
 </dl>
 </dd>
@@ -14014,13 +15137,14 @@ Retrieve user details. A list of fields to include or exclude may also be specif
 <dd>
 
 ```java
-client.users().get(
+client.actions().versions().deploy(
+    "actionId",
     "id",
-    GetUserRequestParameters
-        .builder()
-        .fields("fields")
-        .includeFields(true)
-        .build()
+    OptionalNullable.of(
+        DeployActionVersionRequestContent
+            .builder()
+            .build()
+    )
 );
 ```
 </dd>
@@ -14036,7 +15160,7 @@ client.users().get(
 <dl>
 <dd>
 
-**id:** `String` — ID of the user to retrieve.
+**actionId:** `String` — The ID of an action.
     
 </dd>
 </dl>
@@ -14044,7 +15168,7 @@ client.users().get(
 <dl>
 <dd>
 
-**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (based on value provided for include_fields) in the result. Leave empty to retrieve all fields.
+**id:** `String` — The ID of an action version.
     
 </dd>
 </dl>
@@ -14052,7 +15176,7 @@ client.users().get(
 <dl>
 <dd>
 
-**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
+**request:** `Optional<DeployActionVersionRequestContent>` 
     
 </dd>
 </dl>
@@ -14064,7 +15188,8 @@ client.users().get(
 </dl>
 </details>
 
-<details><summary><code>client.users.delete(id)</code></summary>
+## Actions Executions
+<details><summary><code>client.actions.executions.get(id) -> GetActionExecutionResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -14076,7 +15201,7 @@ client.users().get(
 <dl>
 <dd>
 
-Delete a user by user ID. This action cannot be undone. For Auth0 Dashboard instructions, see [Delete Users](https://auth0.com/docs/manage-users/user-accounts/delete-users).
+Retrieve information about a specific execution of a trigger. Relevant execution IDs will be included in tenant logs generated as part of that authentication flow. Executions will only be stored for 10 days after their creation.
 </dd>
 </dl>
 </dd>
@@ -14091,7 +15216,7 @@ Delete a user by user ID. This action cannot be undone. For Auth0 Dashboard inst
 <dd>
 
 ```java
-client.users().delete("id");
+client.actions().executions().get("id");
 ```
 </dd>
 </dl>
@@ -14106,7 +15231,7 @@ client.users().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the user to delete.
+**id:** `String` — The ID of the execution to retrieve.
     
 </dd>
 </dl>
@@ -14118,7 +15243,8 @@ client.users().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.users.update(id, request) -> UpdateUserResponseContent</code></summary>
+## Actions Modules
+<details><summary><code>client.actions.modules.list() -> SyncPagingIterable&amp;lt;ActionModuleListItem&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -14130,97 +15256,7 @@ client.users().delete("id");
 <dl>
 <dd>
 
-Update a user.
-
-These are the attributes that can be updated at the root level:
-
-- app_metadata
-- blocked
-- email
-- email_verified
-- family_name
-- given_name
-- name
-- nickname
-- password
-- phone_number
-- phone_verified
-- picture
-- username
-- user_metadata
-- verify_email
-
-Some considerations:
-
-- The properties of the new object will replace the old ones.
-- The metadata fields are an exception to this rule (`user_metadata` and `app_metadata`). These properties are merged instead of being replaced but be careful, the merge only occurs on the first level.
-- If you are updating `email`, `email_verified`, `phone_number`, `phone_verified`, `username` or `password` of a secondary identity, you need to specify the `connection` property too.
-- If you are updating `email` or `phone_number` you can specify, optionally, the `client_id` property.
-- Updating `email_verified` is not supported for enterprise and passwordless sms connections.
-- Updating the `blocked` to `false` does not affect the user's blocked state from an excessive amount of incorrectly provided credentials. Use the "Unblock a user" endpoint from the "User Blocks" API to change the user's state.
-- Supported attributes can be unset by supplying `null` as the value.
-
-**Updating a field (non-metadata property)**
-
-To mark the email address of a user as verified, the body to send should be:
-
-```json
-{ "email_verified": true }
-```
-
-**Updating a user metadata root property**
-
-Let's assume that our test user has the following `user_metadata`:
-
-```json
-{ "user_metadata" : { "profileCode": 1479 } }
-```
-
-To add the field `addresses` the body to send should be:
-
-```json
-{ "user_metadata" : { "addresses": {"work_address": "100 Industrial Way"} }}
-```
-
-The modified object ends up with the following `user_metadata` property:
-
-```json
-{
-  "user_metadata": {
-    "profileCode": 1479,
-    "addresses": { "work_address": "100 Industrial Way" }
-  }
-}
-```
-
-**Updating an inner user metadata property**
-
-If there's existing user metadata to which we want to add  `"home_address": "742 Evergreen Terrace"` (using the `addresses` property) we should send the whole `addresses` object. Since this is a first-level object, the object will be merged in, but its own properties will not be. The body to send should be:
-
-```json
-{
-  "user_metadata": {
-    "addresses": {
-      "work_address": "100 Industrial Way",
-      "home_address": "742 Evergreen Terrace"
-    }
-  }
-}
-```
-
-The modified object ends up with the following `user_metadata` property:
-
-```json
-{
-  "user_metadata": {
-    "profileCode": 1479,
-    "addresses": {
-      "work_address": "100 Industrial Way",
-      "home_address": "742 Evergreen Terrace"
-    }
-  }
-}
-```
+Retrieve a paginated list of all Actions Modules with optional filtering and totals.
 </dd>
 </dl>
 </dd>
@@ -14235,10 +15271,11 @@ The modified object ends up with the following `user_metadata` property:
 <dd>
 
 ```java
-client.users().update(
-    "id",
-    UpdateUserRequestContent
+client.actions().modules().list(
+    GetActionModulesRequestParameters
         .builder()
+        .page(1)
+        .perPage(1)
         .build()
 );
 ```
@@ -14255,7 +15292,7 @@ client.users().update(
 <dl>
 <dd>
 
-**id:** `String` — ID of the user to update.
+**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
     
 </dd>
 </dl>
@@ -14263,39 +15300,67 @@ client.users().update(
 <dl>
 <dd>
 
-**blocked:** `Optional<Boolean>` — Whether this user was blocked by an administrator (true) or not (false).
+**perPage:** `Optional<Integer>` — Number of results per page. Paging is disabled if parameter not sent.
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**emailVerified:** `Optional<Boolean>` — Whether this email address is verified (true) or unverified (false). If set to false the user will not receive a verification email unless `verify_email` is set to true.
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.actions.modules.create(request) -> CreateActionModuleResponseContent</code></summary>
 <dl>
 <dd>
 
-**email:** `Optional<String>` — Email address of this user.
-    
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Create a new Actions Module for reusable code across actions.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**phoneNumber:** `Optional<String>` — The user's phone number (following the E.164 recommendation).
-    
+<dl>
+<dd>
+
+```java
+client.actions().modules().create(
+    CreateActionModuleRequestContent
+        .builder()
+        .name("name")
+        .code("code")
+        .build()
+);
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
 <dl>
 <dd>
 
-**phoneVerified:** `Optional<Boolean>` — Whether this phone number has been verified (true) or not (false).
+**name:** `String` — The name of the action module.
     
 </dd>
 </dl>
@@ -14303,7 +15368,7 @@ client.users().update(
 <dl>
 <dd>
 
-**userMetadata:** `Optional<Map<String, Object>>` — User metadata to which this user has read/write access.
+**code:** `String` — The source code of the action module.
     
 </dd>
 </dl>
@@ -14311,7 +15376,7 @@ client.users().update(
 <dl>
 <dd>
 
-**appMetadata:** `Optional<Map<String, Object>>` — User metadata to which this user has read-only access.
+**secrets:** `Optional<List<ActionModuleSecretRequest>>` — The secrets to associate with the action module.
     
 </dd>
 </dl>
@@ -14319,7 +15384,7 @@ client.users().update(
 <dl>
 <dd>
 
-**givenName:** `Optional<String>` — Given name/first name/forename of this user.
+**dependencies:** `Optional<List<ActionModuleDependencyRequest>>` — The npm dependencies of the action module.
     
 </dd>
 </dl>
@@ -14327,7 +15392,7 @@ client.users().update(
 <dl>
 <dd>
 
-**familyName:** `Optional<String>` — Family name/last name/surname of this user.
+**apiVersion:** `Optional<String>` — The API version of the module.
     
 </dd>
 </dl>
@@ -14335,71 +15400,61 @@ client.users().update(
 <dl>
 <dd>
 
-**name:** `Optional<String>` — Name of this user.
+**publish:** `Optional<Boolean>` — Whether to publish the module immediately after creation.
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**nickname:** `Optional<String>` — Preferred nickname or alias of this user.
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.actions.modules.get(id) -> GetActionModuleResponseContent</code></summary>
 <dl>
 <dd>
 
-**picture:** `Optional<String>` — URL to picture, photo, or avatar of this user.
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**verifyEmail:** `Optional<Boolean>` — Whether this user will receive a verification email after creation (true) or no email (false). Overrides behavior of `email_verified` parameter.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**verifyPhoneNumber:** `Optional<Boolean>` — Whether this user will receive a text after changing the phone number (true) or no text (false). Only valid when changing phone number for SMS connections.
-    
+Retrieve details of a specific Actions Module by its unique identifier.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**password:** `Optional<String>` — New password for this user. Only valid for database connections.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**connection:** `Optional<String>` — Name of the connection to target for this user update.
-    
+```java
+client.actions().modules().get("id");
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**clientId:** `Optional<String>` — Auth0 client ID. Only valid when updating email address.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**username:** `Optional<String>` — The user's username. Only valid if the connection requires a username.
+**id:** `String` — The ID of the action module to retrieve.
     
 </dd>
 </dl>
@@ -14411,7 +15466,7 @@ client.users().update(
 </dl>
 </details>
 
-<details><summary><code>client.users.regenerateRecoveryCode(id) -> RegenerateUsersRecoveryCodeResponseContent</code></summary>
+<details><summary><code>client.actions.modules.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -14423,7 +15478,7 @@ client.users().update(
 <dl>
 <dd>
 
-Remove an existing multi-factor authentication (MFA) [recovery code](https://auth0.com/docs/secure/multi-factor-authentication/reset-user-mfa) and generate a new one. If a user cannot access the original device or account used for MFA enrollment, they can use a recovery code to authenticate.
+Permanently delete an Actions Module. This will fail if the module is still in use by any actions.
 </dd>
 </dl>
 </dd>
@@ -14438,7 +15493,7 @@ Remove an existing multi-factor authentication (MFA) [recovery code](https://aut
 <dd>
 
 ```java
-client.users().regenerateRecoveryCode("id");
+client.actions().modules().delete("id");
 ```
 </dd>
 </dl>
@@ -14453,7 +15508,7 @@ client.users().regenerateRecoveryCode("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the user to regenerate a multi-factor authentication recovery code for.
+**id:** `String` — The ID of the Actions Module to delete.
     
 </dd>
 </dl>
@@ -14465,7 +15520,7 @@ client.users().regenerateRecoveryCode("id");
 </dl>
 </details>
 
-<details><summary><code>client.users.revokeAccess(id, request)</code></summary>
+<details><summary><code>client.actions.modules.update(id, request) -> UpdateActionModuleResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -14477,7 +15532,7 @@ client.users().regenerateRecoveryCode("id");
 <dl>
 <dd>
 
-Revokes selected resources related to a user (sessions, refresh tokens, ...).
+Update properties of an existing Actions Module, such as code, dependencies, or secrets.
 </dd>
 </dl>
 </dd>
@@ -14492,9 +15547,9 @@ Revokes selected resources related to a user (sessions, refresh tokens, ...).
 <dd>
 
 ```java
-client.users().revokeAccess(
+client.actions().modules().update(
     "id",
-    RevokeUserAccessRequestContent
+    UpdateActionModuleRequestContent
         .builder()
         .build()
 );
@@ -14512,7 +15567,7 @@ client.users().revokeAccess(
 <dl>
 <dd>
 
-**id:** `String` — ID of the user.
+**id:** `String` — The ID of the action module to update.
     
 </dd>
 </dl>
@@ -14520,7 +15575,7 @@ client.users().revokeAccess(
 <dl>
 <dd>
 
-**sessionId:** `Optional<String>` — ID of the session to revoke.
+**code:** `Optional<String>` — The source code of the action module.
     
 </dd>
 </dl>
@@ -14528,7 +15583,15 @@ client.users().revokeAccess(
 <dl>
 <dd>
 
-**preserveRefreshTokens:** `Optional<Boolean>` — Whether to preserve the refresh tokens associated with the session.
+**secrets:** `Optional<List<ActionModuleSecretRequest>>` — The secrets to associate with the action module.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**dependencies:** `Optional<List<ActionModuleDependencyRequest>>` — The npm dependencies of the action module.
     
 </dd>
 </dl>
@@ -14540,8 +15603,7 @@ client.users().revokeAccess(
 </dl>
 </details>
 
-## Actions Versions
-<details><summary><code>client.actions.versions.list(actionId) -> SyncPagingIterable&amp;lt;ActionVersion&amp;gt;</code></summary>
+<details><summary><code>client.actions.modules.listActions(id) -> SyncPagingIterable&amp;lt;ActionModuleAction&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -14553,7 +15615,7 @@ client.users().revokeAccess(
 <dl>
 <dd>
 
-Retrieve all of an action's versions. An action version is created whenever an action is deployed. An action version is immutable, once created.
+Lists all actions that are using a specific Actions Module, showing which deployed action versions reference this Actions Module.
 </dd>
 </dl>
 </dd>
@@ -14568,9 +15630,9 @@ Retrieve all of an action's versions. An action version is created whenever an a
 <dd>
 
 ```java
-client.actions().versions().list(
-    "actionId",
-    ListActionVersionsRequestParameters
+client.actions().modules().listActions(
+    "id",
+    GetActionModuleActionsRequestParameters
         .builder()
         .page(1)
         .perPage(1)
@@ -14590,7 +15652,7 @@ client.actions().versions().list(
 <dl>
 <dd>
 
-**actionId:** `String` — The ID of the action.
+**id:** `String` — The unique ID of the module.
     
 </dd>
 </dl>
@@ -14598,7 +15660,7 @@ client.actions().versions().list(
 <dl>
 <dd>
 
-**page:** `Optional<Integer>` — Use this field to request a specific page of the list results.
+**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
     
 </dd>
 </dl>
@@ -14606,7 +15668,7 @@ client.actions().versions().list(
 <dl>
 <dd>
 
-**perPage:** `Optional<Integer>` — This field specify the maximum number of results to be returned by the server. 20 by default
+**perPage:** `Optional<Integer>` — Number of results per page.
     
 </dd>
 </dl>
@@ -14618,7 +15680,7 @@ client.actions().versions().list(
 </dl>
 </details>
 
-<details><summary><code>client.actions.versions.get(actionId, id) -> GetActionVersionResponseContent</code></summary>
+<details><summary><code>client.actions.modules.rollback(id, request) -> RollbackActionModuleResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -14630,7 +15692,7 @@ client.actions().versions().list(
 <dl>
 <dd>
 
-Retrieve a specific version of an action. An action version is created whenever an action is deployed. An action version is immutable, once created.
+Rolls back an Actions Module's draft to a previously created version. This action copies the code, dependencies, and secrets from the specified version into the current draft.
 </dd>
 </dl>
 </dd>
@@ -14645,7 +15707,13 @@ Retrieve a specific version of an action. An action version is created whenever
 <dd>
 
 ```java
-client.actions().versions().get("actionId", "id");
+client.actions().modules().rollback(
+    "id",
+    RollbackActionModuleRequestParameters
+        .builder()
+        .moduleVersionId("module_version_id")
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -14660,7 +15728,7 @@ client.actions().versions().get("actionId", "id");
 <dl>
 <dd>
 
-**actionId:** `String` — The ID of the action.
+**id:** `String` — The unique ID of the module to roll back.
     
 </dd>
 </dl>
@@ -14668,7 +15736,7 @@ client.actions().versions().get("actionId", "id");
 <dl>
 <dd>
 
-**id:** `String` — The ID of the action version.
+**moduleVersionId:** `String` — The unique ID of the module version to roll back to.
     
 </dd>
 </dl>
@@ -14680,7 +15748,8 @@ client.actions().versions().get("actionId", "id");
 </dl>
 </details>
 
-<details><summary><code>client.actions.versions.deploy(actionId, id, request) -> DeployActionVersionResponseContent</code></summary>
+## Actions Triggers
+<details><summary><code>client.actions.triggers.list() -> ListActionTriggersResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -14692,7 +15761,7 @@ client.actions().versions().get("actionId", "id");
 <dl>
 <dd>
 
-Performs the equivalent of a roll-back of an action to an earlier, specified version. Creates a new, deployed action version that is identical to the specified version. If this action is currently bound to a trigger, the system will begin executing the newly-created version immediately.
+Retrieve the set of triggers currently available within actions. A trigger is an extensibility point to which actions can be bound.
 </dd>
 </dl>
 </dd>
@@ -14707,14 +15776,53 @@ Performs the equivalent of a roll-back of an action to an earlier, specified ver
 <dd>
 
 ```java
-client.actions().versions().deploy(
-    "actionId",
+client.actions().triggers().list();
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+## Actions Modules Versions
+<details><summary><code>client.actions.modules.versions.list(id) -> SyncPagingIterable&amp;lt;ActionModuleVersion&amp;gt;</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+List all published versions of a specific Actions Module.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.actions().modules().versions().list(
     "id",
-    OptionalNullable.of(
-        DeployActionVersionRequestContent
-            .builder()
-            .build()
-    )
+    GetActionModuleVersionsRequestParameters
+        .builder()
+        .page(1)
+        .perPage(1)
+        .build()
 );
 ```
 </dd>
@@ -14730,7 +15838,7 @@ client.actions().versions().deploy(
 <dl>
 <dd>
 
-**actionId:** `String` — The ID of an action.
+**id:** `String` — The unique ID of the module.
     
 </dd>
 </dl>
@@ -14738,7 +15846,7 @@ client.actions().versions().deploy(
 <dl>
 <dd>
 
-**id:** `String` — The ID of an action version.
+**page:** `Optional<Integer>` — Use this field to request a specific page of the list results.
     
 </dd>
 </dl>
@@ -14746,7 +15854,7 @@ client.actions().versions().deploy(
 <dl>
 <dd>
 
-**request:** `Optional<DeployActionVersionRequestContent>` 
+**perPage:** `Optional<Integer>` — The maximum number of results to be returned by the server in a single response. 20 by default.
     
 </dd>
 </dl>
@@ -14758,8 +15866,7 @@ client.actions().versions().deploy(
 </dl>
 </details>
 
-## Actions Executions
-<details><summary><code>client.actions.executions.get(id) -> GetActionExecutionResponseContent</code></summary>
+<details><summary><code>client.actions.modules.versions.create(id) -> CreateActionModuleVersionResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -14771,7 +15878,7 @@ client.actions().versions().deploy(
 <dl>
 <dd>
 
-Retrieve information about a specific execution of a trigger. Relevant execution IDs will be included in tenant logs generated as part of that authentication flow. Executions will only be stored for 10 days after their creation.
+Creates a new immutable version of an Actions Module from the current draft version. This publishes the draft as a new version that can be referenced by actions, while maintaining the existing draft for continued development.
 </dd>
 </dl>
 </dd>
@@ -14786,7 +15893,7 @@ Retrieve information about a specific execution of a trigger. Relevant execution
 <dd>
 
 ```java
-client.actions().executions().get("id");
+client.actions().modules().versions().create("id");
 ```
 </dd>
 </dl>
@@ -14801,7 +15908,69 @@ client.actions().executions().get("id");
 <dl>
 <dd>
 
-**id:** `String` — The ID of the execution to retrieve.
+**id:** `String` — The ID of the action module to create a version for.
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.actions.modules.versions.get(id, versionId) -> GetActionModuleVersionResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Retrieve the details of a specific, immutable version of an Actions Module.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.actions().modules().versions().get("id", "versionId");
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` — The unique ID of the module.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**versionId:** `String` — The unique ID of the module version to retrieve.
     
 </dd>
 </dl>
@@ -14813,8 +15982,8 @@ client.actions().executions().get("id");
 </dl>
 </details>
 
-## Actions Modules
-<details><summary><code>client.actions.modules.list() -> SyncPagingIterable&amp;lt;ActionModuleListItem&amp;gt;</code></summary>
+## Actions Triggers Bindings
+<details><summary><code>client.actions.triggers.bindings.list(triggerId) -> SyncPagingIterable&amp;lt;ActionBinding&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -14826,7 +15995,7 @@ client.actions().executions().get("id");
 <dl>
 <dd>
 
-Retrieve a paginated list of all Actions Modules with optional filtering and totals.
+Retrieve the actions that are bound to a trigger. Once an action is created and deployed, it must be attached (i.e. bound) to a trigger so that it will be executed as part of a flow. The list of actions returned reflects the order in which they will be executed during the appropriate flow.
 </dd>
 </dl>
 </dd>
@@ -14841,8 +16010,9 @@ Retrieve a paginated list of all Actions Modules with optional filtering and tot
 <dd>
 
 ```java
-client.actions().modules().list(
-    GetActionModulesRequestParameters
+client.actions().triggers().bindings().list(
+    ActionTriggerTypeEnum.POST_LOGIN,
+    ListActionTriggerBindingsRequestParameters
         .builder()
         .page(1)
         .perPage(1)
@@ -14862,7 +16032,7 @@ client.actions().modules().list(
 <dl>
 <dd>
 
-**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
+**triggerId:** `ActionTriggerTypeEnum` — An actions extensibility point.
     
 </dd>
 </dl>
@@ -14870,7 +16040,15 @@ client.actions().modules().list(
 <dl>
 <dd>
 
-**perPage:** `Optional<Integer>` — Number of results per page. Paging is disabled if parameter not sent.
+**page:** `Optional<Integer>` — Use this field to request a specific page of the list results.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**perPage:** `Optional<Integer>` — The maximum number of results to be returned in a single request. 20 by default
     
 </dd>
 </dl>
@@ -14882,7 +16060,7 @@ client.actions().modules().list(
 </dl>
 </details>
 
-<details><summary><code>client.actions.modules.create(request) -> CreateActionModuleResponseContent</code></summary>
+<details><summary><code>client.actions.triggers.bindings.updateMany(triggerId, request) -> UpdateActionBindingsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -14894,7 +16072,7 @@ client.actions().modules().list(
 <dl>
 <dd>
 
-Create a new Actions Module for reusable code across actions.
+Update the actions that are bound (i.e. attached) to a trigger. Once an action is created and deployed, it must be attached (i.e. bound) to a trigger so that it will be executed as part of a flow. The order in which the actions are provided will determine the order in which they are executed.
 </dd>
 </dl>
 </dd>
@@ -14909,11 +16087,10 @@ Create a new Actions Module for reusable code across actions.
 <dd>
 
 ```java
-client.actions().modules().create(
-    CreateActionModuleRequestContent
+client.actions().triggers().bindings().updateMany(
+    ActionTriggerTypeEnum.POST_LOGIN,
+    UpdateActionBindingsRequestContent
         .builder()
-        .name("name")
-        .code("code")
         .build()
 );
 ```
@@ -14930,7 +16107,7 @@ client.actions().modules().create(
 <dl>
 <dd>
 
-**name:** `String` — The name of the action module.
+**triggerId:** `ActionTriggerTypeEnum` — An actions extensibility point.
     
 </dd>
 </dl>
@@ -14938,39 +16115,62 @@ client.actions().modules().create(
 <dl>
 <dd>
 
-**code:** `String` — The source code of the action module.
+**bindings:** `Optional<List<ActionBindingWithRef>>` — The actions that will be bound to this trigger. The order in which they are included will be the order in which they are executed.
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**secrets:** `Optional<List<ActionModuleSecretRequest>>` — The secrets to associate with the action module.
-    
 </dd>
 </dl>
+</details>
 
+## Anomaly Blocks
+<details><summary><code>client.anomaly.blocks.checkIp(id)</code></summary>
 <dl>
 <dd>
 
-**dependencies:** `Optional<List<ActionModuleDependencyRequest>>` — The npm dependencies of the action module.
-    
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Check if the given IP address is blocked via the <a href="https://auth0.com/docs/configure/attack-protection/suspicious-ip-throttling">Suspicious IP Throttling</a> due to multiple suspicious attempts.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**apiVersion:** `Optional<String>` — The API version of the module.
-    
+<dl>
+<dd>
+
+```java
+client.anomaly().blocks().checkIp("id");
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**publish:** `Optional<Boolean>` — Whether to publish the module immediately after creation.
+<dl>
+<dd>
+
+**id:** `String` — IP address to check.
     
 </dd>
 </dl>
@@ -14982,7 +16182,7 @@ client.actions().modules().create(
 </dl>
 </details>
 
-<details><summary><code>client.actions.modules.get(id) -> GetActionModuleResponseContent</code></summary>
+<details><summary><code>client.anomaly.blocks.unblockIp(id)</code></summary>
 <dl>
 <dd>
 
@@ -14994,7 +16194,7 @@ client.actions().modules().create(
 <dl>
 <dd>
 
-Retrieve details of a specific Actions Module by its unique identifier.
+Remove a block imposed by <a href="https://auth0.com/docs/configure/attack-protection/suspicious-ip-throttling">Suspicious IP Throttling</a> for the given IP address.
 </dd>
 </dl>
 </dd>
@@ -15009,7 +16209,7 @@ Retrieve details of a specific Actions Module by its unique identifier.
 <dd>
 
 ```java
-client.actions().modules().get("id");
+client.anomaly().blocks().unblockIp("id");
 ```
 </dd>
 </dl>
@@ -15024,7 +16224,7 @@ client.actions().modules().get("id");
 <dl>
 <dd>
 
-**id:** `String` — The ID of the action module to retrieve.
+**id:** `String` — IP address to unblock.
     
 </dd>
 </dl>
@@ -15036,7 +16236,8 @@ client.actions().modules().get("id");
 </dl>
 </details>
 
-<details><summary><code>client.actions.modules.delete(id)</code></summary>
+## AttackProtection BotDetection
+<details><summary><code>client.attackProtection.botDetection.get() -> GetBotDetectionSettingsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -15048,7 +16249,7 @@ client.actions().modules().get("id");
 <dl>
 <dd>
 
-Permanently delete an Actions Module. This will fail if the module is still in use by any actions.
+Get the Bot Detection configuration of your tenant.
 </dd>
 </dl>
 </dd>
@@ -15063,34 +16264,19 @@ Permanently delete an Actions Module. This will fail if the module is still in u
 <dd>
 
 ```java
-client.actions().modules().delete("id");
+client.attackProtection().botDetection().get();
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**id:** `String` — The ID of the Actions Module to delete.
-    
-</dd>
-</dl>
-</dd>
-</dl>
-
 
 </dd>
 </dl>
 </details>
 
-<details><summary><code>client.actions.modules.update(id, request) -> UpdateActionModuleResponseContent</code></summary>
+<details><summary><code>client.attackProtection.botDetection.update(request) -> UpdateBotDetectionSettingsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -15102,7 +16288,7 @@ client.actions().modules().delete("id");
 <dl>
 <dd>
 
-Update properties of an existing Actions Module, such as code, dependencies, or secrets.
+Update the Bot Detection configuration of your tenant.
 </dd>
 </dl>
 </dd>
@@ -15117,9 +16303,8 @@ Update properties of an existing Actions Module, such as code, dependencies, or
 <dd>
 
 ```java
-client.actions().modules().update(
-    "id",
-    UpdateActionModuleRequestContent
+client.attackProtection().botDetection().update(
+    UpdateBotDetectionSettingsRequestContent
         .builder()
         .build()
 );
@@ -15137,7 +16322,7 @@ client.actions().modules().update(
 <dl>
 <dd>
 
-**id:** `String` — The ID of the action module to update.
+**botDetectionLevel:** `Optional<BotDetectionLevelEnum>` 
     
 </dd>
 </dl>
@@ -15145,7 +16330,7 @@ client.actions().modules().update(
 <dl>
 <dd>
 
-**code:** `Optional<String>` — The source code of the action module.
+**challengePasswordPolicy:** `Optional<BotDetectionChallengePolicyPasswordFlowEnum>` 
     
 </dd>
 </dl>
@@ -15153,7 +16338,7 @@ client.actions().modules().update(
 <dl>
 <dd>
 
-**secrets:** `Optional<List<ActionModuleSecretRequest>>` — The secrets to associate with the action module.
+**challengePasswordlessPolicy:** `Optional<BotDetectionChallengePolicyPasswordlessFlowEnum>` 
     
 </dd>
 </dl>
@@ -15161,60 +16346,40 @@ client.actions().modules().update(
 <dl>
 <dd>
 
-**dependencies:** `Optional<List<ActionModuleDependencyRequest>>` — The npm dependencies of the action module.
+**challengePasswordResetPolicy:** `Optional<BotDetectionChallengePolicyPasswordResetFlowEnum>` 
     
 </dd>
 </dl>
-</dd>
-</dl>
 
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.actions.modules.listActions(id) -> SyncPagingIterable&amp;lt;ActionModuleAction&amp;gt;</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
-
-<dl>
-<dd>
+**allowlist:** `Optional<List<String>>` 
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
-Lists all actions that are using a specific Actions Module, showing which deployed action versions reference this Actions Module.
+**monitoringModeEnabled:** `Optional<Boolean>` 
+    
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### 🔌 Usage
 
-<dl>
-<dd>
+</dd>
+</dl>
+</details>
 
+## AttackProtection BreachedPasswordDetection
+<details><summary><code>client.attackProtection.breachedPasswordDetection.get() -> GetBreachedPasswordDetectionSettingsResponseContent</code></summary>
 <dl>
 <dd>
 
-```java
-client.actions().modules().listActions(
-    "id",
-    GetActionModuleActionsRequestParameters
-        .builder()
-        .page(1)
-        .perPage(1)
-        .build()
-);
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### ⚙️ Parameters
+#### 📝 Description
 
 <dl>
 <dd>
@@ -15222,24 +16387,23 @@ client.actions().modules().listActions(
 <dl>
 <dd>
 
-**id:** `String` — The unique ID of the module.
-    
+Retrieve details of the Breached Password Detection configuration of your tenant.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**perPage:** `Optional<Integer>` — Number of results per page.
-    
+```java
+client.attackProtection().breachedPasswordDetection().get();
+```
 </dd>
 </dl>
 </dd>
@@ -15250,7 +16414,7 @@ client.actions().modules().listActions(
 </dl>
 </details>
 
-<details><summary><code>client.actions.modules.rollback(id, request) -> RollbackActionModuleResponseContent</code></summary>
+<details><summary><code>client.attackProtection.breachedPasswordDetection.update(request) -> UpdateBreachedPasswordDetectionSettingsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -15262,7 +16426,7 @@ client.actions().modules().listActions(
 <dl>
 <dd>
 
-Rolls back an Actions Module's draft to a previously created version. This action copies the code, dependencies, and secrets from the specified version into the current draft.
+Update details of the Breached Password Detection configuration of your tenant.
 </dd>
 </dl>
 </dd>
@@ -15277,11 +16441,9 @@ Rolls back an Actions Module's draft to a previously created version. This actio
 <dd>
 
 ```java
-client.actions().modules().rollback(
-    "id",
-    RollbackActionModuleRequestParameters
+client.attackProtection().breachedPasswordDetection().update(
+    UpdateBreachedPasswordDetectionSettingsRequestContent
         .builder()
-        .moduleVersionId("module_version_id")
         .build()
 );
 ```
@@ -15298,7 +16460,7 @@ client.actions().modules().rollback(
 <dl>
 <dd>
 
-**id:** `String` — The unique ID of the module to roll back.
+**enabled:** `Optional<Boolean>` — Whether or not breached password detection is active.
     
 </dd>
 </dl>
@@ -15306,7 +16468,37 @@ client.actions().modules().rollback(
 <dl>
 <dd>
 
-**moduleVersionId:** `String` — The unique ID of the module version to roll back to.
+**shields:** `Optional<List<BreachedPasswordDetectionShieldsEnum>>` 
+
+Action to take when a breached password is detected during a login.
+      Possible values: <code>block</code>, <code>user_notification</code>, <code>admin_notification</code>.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**adminNotificationFrequency:** `Optional<List<BreachedPasswordDetectionAdminNotificationFrequencyEnum>>` 
+
+When "admin_notification" is enabled, determines how often email notifications are sent.
+        Possible values: <code>immediately</code>, <code>daily</code>, <code>weekly</code>, <code>monthly</code>.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**method:** `Optional<BreachedPasswordDetectionMethodEnum>` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**stage:** `Optional<BreachedPasswordDetectionStage>` 
     
 </dd>
 </dl>
@@ -15318,8 +16510,8 @@ client.actions().modules().rollback(
 </dl>
 </details>
 
-## Actions Triggers
-<details><summary><code>client.actions.triggers.list() -> ListActionTriggersResponseContent</code></summary>
+## AttackProtection BruteForceProtection
+<details><summary><code>client.attackProtection.bruteForceProtection.get() -> GetBruteForceSettingsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -15331,7 +16523,7 @@ client.actions().modules().rollback(
 <dl>
 <dd>
 
-Retrieve the set of triggers currently available within actions. A trigger is an extensibility point to which actions can be bound.
+Retrieve details of the Brute-force Protection configuration of your tenant.
 </dd>
 </dl>
 </dd>
@@ -15346,7 +16538,7 @@ Retrieve the set of triggers currently available within actions. A trigger is an
 <dd>
 
 ```java
-client.actions().triggers().list();
+client.attackProtection().bruteForceProtection().get();
 ```
 </dd>
 </dl>
@@ -15358,8 +16550,7 @@ client.actions().triggers().list();
 </dl>
 </details>
 
-## Actions Modules Versions
-<details><summary><code>client.actions.modules.versions.list(id) -> SyncPagingIterable&amp;lt;ActionModuleVersion&amp;gt;</code></summary>
+<details><summary><code>client.attackProtection.bruteForceProtection.update(request) -> UpdateBruteForceSettingsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -15371,7 +16562,7 @@ client.actions().triggers().list();
 <dl>
 <dd>
 
-List all published versions of a specific Actions Module.
+Update the Brute-force Protection configuration of your tenant.
 </dd>
 </dl>
 </dd>
@@ -15386,12 +16577,9 @@ List all published versions of a specific Actions Module.
 <dd>
 
 ```java
-client.actions().modules().versions().list(
-    "id",
-    GetActionModuleVersionsRequestParameters
+client.attackProtection().bruteForceProtection().update(
+    UpdateBruteForceSettingsRequestContent
         .builder()
-        .page(1)
-        .perPage(1)
         .build()
 );
 ```
@@ -15400,15 +16588,34 @@ client.actions().modules().versions().list(
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**enabled:** `Optional<Boolean>` — Whether or not brute force attack protections are active.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
+**shields:** `Optional<List<BruteForceProtectionShieldsEnum>>` 
+
+Action to take when a brute force protection threshold is violated.
+        Possible values: <code>block</code>, <code>user_notification</code>.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**id:** `String` — The unique ID of the module.
+**allowlist:** `Optional<List<String>>` — List of trusted IP addresses that will not have attack protection enforced against them.
     
 </dd>
 </dl>
@@ -15416,7 +16623,7 @@ client.actions().modules().versions().list(
 <dl>
 <dd>
 
-**page:** `Optional<Integer>` — Use this field to request a specific page of the list results.
+**mode:** `Optional<BruteForceProtectionModeEnum>` 
     
 </dd>
 </dl>
@@ -15424,7 +16631,7 @@ client.actions().modules().versions().list(
 <dl>
 <dd>
 
-**perPage:** `Optional<Integer>` — The maximum number of results to be returned by the server in a single response. 20 by default.
+**maxAttempts:** `Optional<Integer>` — Maximum number of unsuccessful attempts.
     
 </dd>
 </dl>
@@ -15436,7 +16643,8 @@ client.actions().modules().versions().list(
 </dl>
 </details>
 
-<details><summary><code>client.actions.modules.versions.create(id) -> CreateActionModuleVersionResponseContent</code></summary>
+## AttackProtection Captcha
+<details><summary><code>client.attackProtection.captcha.get() -> GetAttackProtectionCaptchaResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -15448,7 +16656,7 @@ client.actions().modules().versions().list(
 <dl>
 <dd>
 
-Creates a new immutable version of an Actions Module from the current draft version. This publishes the draft as a new version that can be referenced by actions, while maintaining the existing draft for continued development.
+Get the CAPTCHA configuration for your client.
 </dd>
 </dl>
 </dd>
@@ -15463,34 +16671,19 @@ Creates a new immutable version of an Actions Module from the current draft vers
 <dd>
 
 ```java
-client.actions().modules().versions().create("id");
+client.attackProtection().captcha().get();
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**id:** `String` — The ID of the action module to create a version for.
-    
-</dd>
-</dl>
-</dd>
-</dl>
-
 
 </dd>
 </dl>
 </details>
 
-<details><summary><code>client.actions.modules.versions.get(id, versionId) -> GetActionModuleVersionResponseContent</code></summary>
+<details><summary><code>client.attackProtection.captcha.update(request) -> UpdateAttackProtectionCaptchaResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -15502,7 +16695,7 @@ client.actions().modules().versions().create("id");
 <dl>
 <dd>
 
-Retrieve the details of a specific, immutable version of an Actions Module.
+Update existing CAPTCHA configuration for your client.
 </dd>
 </dl>
 </dd>
@@ -15517,7 +16710,11 @@ Retrieve the details of a specific, immutable version of an Actions Module.
 <dd>
 
 ```java
-client.actions().modules().versions().get("id", "versionId");
+client.attackProtection().captcha().update(
+    UpdateAttackProtectionCaptchaRequestContent
+        .builder()
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -15532,7 +16729,7 @@ client.actions().modules().versions().get("id", "versionId");
 <dl>
 <dd>
 
-**id:** `String` — The unique ID of the module.
+**activeProviderId:** `Optional<AttackProtectionCaptchaProviderId>` 
     
 </dd>
 </dl>
@@ -15540,86 +16737,96 @@ client.actions().modules().versions().get("id", "versionId");
 <dl>
 <dd>
 
-**versionId:** `String` — The unique ID of the module version to retrieve.
+**arkose:** `Optional<AttackProtectionUpdateCaptchaArkose>` 
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
+**authChallenge:** `Optional<AttackProtectionCaptchaAuthChallengeRequest>` 
+    
 </dd>
 </dl>
-</details>
 
-## Actions Triggers Bindings
-<details><summary><code>client.actions.triggers.bindings.list(triggerId) -> SyncPagingIterable&amp;lt;ActionBinding&amp;gt;</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+**hcaptcha:** `Optional<AttackProtectionUpdateCaptchaHcaptcha>` 
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**friendlyCaptcha:** `Optional<AttackProtectionUpdateCaptchaFriendlyCaptcha>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-Retrieve the actions that are bound to a trigger. Once an action is created and deployed, it must be attached (i.e. bound) to a trigger so that it will be executed as part of a flow. The list of actions returned reflects the order in which they will be executed during the appropriate flow.
-</dd>
-</dl>
+**recaptchaEnterprise:** `Optional<AttackProtectionUpdateCaptchaRecaptchaEnterprise>` 
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
 <dl>
 <dd>
 
+**recaptchaV2:** `Optional<AttackProtectionUpdateCaptchaRecaptchaV2>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-```java
-client.actions().triggers().bindings().list(
-    ActionTriggerTypeEnum.POST_LOGIN,
-    ListActionTriggerBindingsRequestParameters
-        .builder()
-        .page(1)
-        .perPage(1)
-        .build()
-);
-```
+**simpleCaptcha:** `Optional<Map<String, Object>>` 
+    
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
 
+</dd>
+</dl>
+</details>
+
+## AttackProtection PhoneProviderProtection
+<details><summary><code>client.attackProtection.phoneProviderProtection.get() -> GetPhoneProviderProtectionResponseContent</code></summary>
 <dl>
 <dd>
 
+#### 📝 Description
+
 <dl>
 <dd>
 
-**triggerId:** `ActionTriggerTypeEnum` — An actions extensibility point.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**page:** `Optional<Integer>` — Use this field to request a specific page of the list results.
-    
+Get the phone provider protection configuration for a tenant.
 </dd>
 </dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
 
 <dl>
 <dd>
 
-**perPage:** `Optional<Integer>` — The maximum number of results to be returned in a single request. 20 by default
-    
+<dl>
+<dd>
+
+```java
+client.attackProtection().phoneProviderProtection().get();
+```
 </dd>
 </dl>
 </dd>
@@ -15630,7 +16837,7 @@ client.actions().triggers().bindings().list(
 </dl>
 </details>
 
-<details><summary><code>client.actions.triggers.bindings.updateMany(triggerId, request) -> UpdateActionBindingsResponseContent</code></summary>
+<details><summary><code>client.attackProtection.phoneProviderProtection.patch(request) -> PatchPhoneProviderProtectionResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -15642,7 +16849,7 @@ client.actions().triggers().bindings().list(
 <dl>
 <dd>
 
-Update the actions that are bound (i.e. attached) to a trigger. Once an action is created and deployed, it must be attached (i.e. bound) to a trigger so that it will be executed as part of a flow. The order in which the actions are provided will determine the order in which they are executed.
+Update the phone provider protection configuration for a tenant.
 </dd>
 </dl>
 </dd>
@@ -15657,10 +16864,10 @@ Update the actions that are bound (i.e. attached) to a trigger. Once an action i
 <dd>
 
 ```java
-client.actions().triggers().bindings().updateMany(
-    ActionTriggerTypeEnum.POST_LOGIN,
-    UpdateActionBindingsRequestContent
+client.attackProtection().phoneProviderProtection().patch(
+    PatchPhoneProviderProtectionRequestContent
         .builder()
+        .type(PhoneProviderProtectionBackoffStrategyEnum.EXPONENTIAL)
         .build()
 );
 ```
@@ -15677,15 +16884,7 @@ client.actions().triggers().bindings().updateMany(
 <dl>
 <dd>
 
-**triggerId:** `ActionTriggerTypeEnum` — An actions extensibility point.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**bindings:** `Optional<List<ActionBindingWithRef>>` — The actions that will be bound to this trigger. The order in which they are included will be the order in which they are executed.
+**type:** `PhoneProviderProtectionBackoffStrategyEnum` 
     
 </dd>
 </dl>
@@ -15697,8 +16896,8 @@ client.actions().triggers().bindings().updateMany(
 </dl>
 </details>
 
-## Anomaly Blocks
-<details><summary><code>client.anomaly.blocks.checkIp(id)</code></summary>
+## AttackProtection SuspiciousIpThrottling
+<details><summary><code>client.attackProtection.suspiciousIpThrottling.get() -> GetSuspiciousIpThrottlingSettingsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -15710,7 +16909,7 @@ client.actions().triggers().bindings().updateMany(
 <dl>
 <dd>
 
-Check if the given IP address is blocked via the <a href="https://auth0.com/docs/configure/attack-protection/suspicious-ip-throttling">Suspicious IP Throttling</a> due to multiple suspicious attempts.
+Retrieve details of the Suspicious IP Throttling configuration of your tenant.
 </dd>
 </dl>
 </dd>
@@ -15725,34 +16924,19 @@ Check if the given IP address is blocked via the <a href="https://auth0.com/docs
 <dd>
 
 ```java
-client.anomaly().blocks().checkIp("id");
+client.attackProtection().suspiciousIpThrottling().get();
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**id:** `String` — IP address to check.
-    
-</dd>
-</dl>
-</dd>
-</dl>
-
 
 </dd>
 </dl>
 </details>
 
-<details><summary><code>client.anomaly.blocks.unblockIp(id)</code></summary>
+<details><summary><code>client.attackProtection.suspiciousIpThrottling.update(request) -> UpdateSuspiciousIpThrottlingSettingsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -15764,7 +16948,7 @@ client.anomaly().blocks().checkIp("id");
 <dl>
 <dd>
 
-Remove a block imposed by <a href="https://auth0.com/docs/configure/attack-protection/suspicious-ip-throttling">Suspicious IP Throttling</a> for the given IP address.
+Update the details of the Suspicious IP Throttling configuration of your tenant.
 </dd>
 </dl>
 </dd>
@@ -15779,7 +16963,11 @@ Remove a block imposed by <a href="https://auth0.com/docs/configure/attack-prote
 <dd>
 
 ```java
-client.anomaly().blocks().unblockIp("id");
+client.attackProtection().suspiciousIpThrottling().update(
+    UpdateSuspiciousIpThrottlingSettingsRequestContent
+        .builder()
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -15794,36 +16982,49 @@ client.anomaly().blocks().unblockIp("id");
 <dl>
 <dd>
 
-**id:** `String` — IP address to unblock.
+**enabled:** `Optional<Boolean>` — Whether or not suspicious IP throttling attack protections are active.
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
+
+**shields:** `Optional<List<SuspiciousIpThrottlingShieldsEnum>>` 
 
+Action to take when a suspicious IP throttling threshold is violated.
+          Possible values: <code>block</code>, <code>admin_notification</code>.
+    
 </dd>
 </dl>
-</details>
 
-## AttackProtection BotDetection
-<details><summary><code>client.attackProtection.botDetection.get() -> GetBotDetectionSettingsResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
-
-<dl>
-<dd>
+**allowlist:** `Optional<List<String>>` 
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
-Get the Bot Detection configuration of your tenant.
+**stage:** `Optional<SuspiciousIpThrottlingStage>` 
+    
+</dd>
+</dl>
 </dd>
 </dl>
+
+
 </dd>
 </dl>
+</details>
+
+## Branding Templates
+<details><summary><code>client.branding.templates.getUniversalLogin() -> GetUniversalLoginTemplateResponseContent</code></summary>
+<dl>
+<dd>
 
 #### 🔌 Usage
 
@@ -15834,7 +17035,7 @@ Get the Bot Detection configuration of your tenant.
 <dd>
 
 ```java
-client.attackProtection().botDetection().get();
+client.branding().templates().getUniversalLogin();
 ```
 </dd>
 </dl>
@@ -15846,7 +17047,7 @@ client.attackProtection().botDetection().get();
 </dl>
 </details>
 
-<details><summary><code>client.attackProtection.botDetection.update(request) -> UpdateBotDetectionSettingsResponseContent</code></summary>
+<details><summary><code>client.branding.templates.updateUniversalLogin(request)</code></summary>
 <dl>
 <dd>
 
@@ -15858,81 +17059,62 @@ client.attackProtection().botDetection().get();
 <dl>
 <dd>
 
-Update the Bot Detection configuration of your tenant.
-</dd>
-</dl>
-</dd>
-</dl>
+Update the Universal Login branding template.
 
-#### 🔌 Usage
+When `content-type` header is set to `application/json`:
 
-<dl>
-<dd>
+```json
+{
+  "template": "<!DOCTYPE html>{% assign resolved_dir = dir | default: \"auto\" %}<html lang=\"{{locale}}\" dir=\"{{resolved_dir}}\"><head>{%- auth0:head -%}</head><body class=\"_widget-auto-layout\">{%- auth0:widget -%}</body></html>"
+}
+```
 
-<dl>
-<dd>
+When `content-type` header is set to `text/html`:
 
-```java
-client.attackProtection().botDetection().update(
-    UpdateBotDetectionSettingsRequestContent
-        .builder()
-        .build()
-);
+```html
+<!DOCTYPE html>
+{% assign resolved_dir = dir | default: "auto" %}
+<html lang="{{locale}}" dir="{{resolved_dir}}">
+  <head>
+    {%- auth0:head -%}
+  </head>
+  <body class="_widget-auto-layout">
+    {%- auth0:widget -%}
+  </body>
+</html>
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
+#### 🔌 Usage
 
 <dl>
 <dd>
 
-**botDetectionLevel:** `Optional<BotDetectionLevelEnum>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**challengePasswordPolicy:** `Optional<BotDetectionChallengePolicyPasswordFlowEnum>` 
-    
+```java
+client.branding().templates().updateUniversalLogin(
+    UpdateUniversalLoginTemplateRequestContent.of("string")
+);
+```
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**challengePasswordlessPolicy:** `Optional<BotDetectionChallengePolicyPasswordlessFlowEnum>` 
-    
 </dd>
 </dl>
 
-<dl>
-<dd>
-
-**challengePasswordResetPolicy:** `Optional<BotDetectionChallengePolicyPasswordResetFlowEnum>` 
-    
-</dd>
-</dl>
+#### ⚙️ Parameters
 
 <dl>
 <dd>
 
-**allowlist:** `Optional<List<String>>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**monitoringModeEnabled:** `Optional<Boolean>` 
+**request:** `UpdateUniversalLoginTemplateRequestContent` 
     
 </dd>
 </dl>
@@ -15944,25 +17126,10 @@ client.attackProtection().botDetection().update(
 </dl>
 </details>
 
-## AttackProtection BreachedPasswordDetection
-<details><summary><code>client.attackProtection.breachedPasswordDetection.get() -> GetBreachedPasswordDetectionSettingsResponseContent</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
+<details><summary><code>client.branding.templates.deleteUniversalLogin()</code></summary>
 <dl>
 <dd>
 
-Retrieve details of the Breached Password Detection configuration of your tenant.
-</dd>
-</dl>
-</dd>
-</dl>
-
 #### 🔌 Usage
 
 <dl>
@@ -15972,7 +17139,7 @@ Retrieve details of the Breached Password Detection configuration of your tenant
 <dd>
 
 ```java
-client.attackProtection().breachedPasswordDetection().get();
+client.branding().templates().deleteUniversalLogin();
 ```
 </dd>
 </dl>
@@ -15984,7 +17151,8 @@ client.attackProtection().breachedPasswordDetection().get();
 </dl>
 </details>
 
-<details><summary><code>client.attackProtection.breachedPasswordDetection.update(request) -> UpdateBreachedPasswordDetectionSettingsResponseContent</code></summary>
+## Branding Themes
+<details><summary><code>client.branding.themes.create(request) -> CreateBrandingThemeResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -15996,7 +17164,7 @@ client.attackProtection().breachedPasswordDetection().get();
 <dl>
 <dd>
 
-Update details of the Breached Password Detection configuration of your tenant.
+Create branding theme.
 </dd>
 </dl>
 </dd>
@@ -16011,9 +17179,112 @@ Update details of the Breached Password Detection configuration of your tenant.
 <dd>
 
 ```java
-client.attackProtection().breachedPasswordDetection().update(
-    UpdateBreachedPasswordDetectionSettingsRequestContent
+client.branding().themes().create(
+    CreateBrandingThemeRequestContent
         .builder()
+        .borders(
+            BrandingThemeBorders
+                .builder()
+                .buttonBorderRadius(1.1)
+                .buttonBorderWeight(1.1)
+                .buttonsStyle(BrandingThemeBordersButtonsStyleEnum.PILL)
+                .inputBorderRadius(1.1)
+                .inputBorderWeight(1.1)
+                .inputsStyle(BrandingThemeBordersInputsStyleEnum.PILL)
+                .showWidgetShadow(true)
+                .widgetBorderWeight(1.1)
+                .widgetCornerRadius(1.1)
+                .build()
+        )
+        .colors(
+            BrandingThemeColors
+                .builder()
+                .bodyText("body_text")
+                .error("error")
+                .header("header")
+                .icons("icons")
+                .inputBackground("input_background")
+                .inputBorder("input_border")
+                .inputFilledText("input_filled_text")
+                .inputLabelsPlaceholders("input_labels_placeholders")
+                .linksFocusedComponents("links_focused_components")
+                .primaryButton("primary_button")
+                .primaryButtonLabel("primary_button_label")
+                .secondaryButtonBorder("secondary_button_border")
+                .secondaryButtonLabel("secondary_button_label")
+                .success("success")
+                .widgetBackground("widget_background")
+                .widgetBorder("widget_border")
+                .build()
+        )
+        .fonts(
+            BrandingThemeFonts
+                .builder()
+                .bodyText(
+                    BrandingThemeFontBodyText
+                        .builder()
+                        .bold(true)
+                        .size(1.1)
+                        .build()
+                )
+                .buttonsText(
+                    BrandingThemeFontButtonsText
+                        .builder()
+                        .bold(true)
+                        .size(1.1)
+                        .build()
+                )
+                .fontUrl("font_url")
+                .inputLabels(
+                    BrandingThemeFontInputLabels
+                        .builder()
+                        .bold(true)
+                        .size(1.1)
+                        .build()
+                )
+                .links(
+                    BrandingThemeFontLinks
+                        .builder()
+                        .bold(true)
+                        .size(1.1)
+                        .build()
+                )
+                .linksStyle(BrandingThemeFontLinksStyleEnum.NORMAL)
+                .referenceTextSize(1.1)
+                .subtitle(
+                    BrandingThemeFontSubtitle
+                        .builder()
+                        .bold(true)
+                        .size(1.1)
+                        .build()
+                )
+                .title(
+                    BrandingThemeFontTitle
+                        .builder()
+                        .bold(true)
+                        .size(1.1)
+                        .build()
+                )
+                .build()
+        )
+        .pageBackground(
+            BrandingThemePageBackground
+                .builder()
+                .backgroundColor("background_color")
+                .backgroundImageUrl("background_image_url")
+                .pageLayout(BrandingThemePageBackgroundPageLayoutEnum.CENTER)
+                .build()
+        )
+        .widget(
+            BrandingThemeWidget
+                .builder()
+                .headerTextAlignment(BrandingThemeWidgetHeaderTextAlignmentEnum.CENTER)
+                .logoHeight(1.1)
+                .logoPosition(BrandingThemeWidgetLogoPositionEnum.CENTER)
+                .logoUrl("logo_url")
+                .socialButtonsLayout(BrandingThemeWidgetSocialButtonsLayoutEnum.BOTTOM)
+                .build()
+        )
         .build()
 );
 ```
@@ -16030,7 +17301,7 @@ client.attackProtection().breachedPasswordDetection().update(
 <dl>
 <dd>
 
-**enabled:** `Optional<Boolean>` — Whether or not breached password detection is active.
+**borders:** `BrandingThemeBorders` 
     
 </dd>
 </dl>
@@ -16038,10 +17309,15 @@ client.attackProtection().breachedPasswordDetection().update(
 <dl>
 <dd>
 
-**shields:** `Optional<List<BreachedPasswordDetectionShieldsEnum>>` 
+**colors:** `BrandingThemeColors` 
+    
+</dd>
+</dl>
 
-Action to take when a breached password is detected during a login.
-      Possible values: <code>block</code>, <code>user_notification</code>, <code>admin_notification</code>.
+<dl>
+<dd>
+
+**displayName:** `Optional<String>` — Display Name
     
 </dd>
 </dl>
@@ -16049,10 +17325,15 @@ Action to take when a breached password is detected during a login.
 <dl>
 <dd>
 
-**adminNotificationFrequency:** `Optional<List<BreachedPasswordDetectionAdminNotificationFrequencyEnum>>` 
+**fonts:** `BrandingThemeFonts` 
+    
+</dd>
+</dl>
 
-When "admin_notification" is enabled, determines how often email notifications are sent.
-        Possible values: <code>immediately</code>, <code>daily</code>, <code>weekly</code>, <code>monthly</code>.
+<dl>
+<dd>
+
+**identifiers:** `Optional<BrandingThemeIdentifiers>` 
     
 </dd>
 </dl>
@@ -16060,7 +17341,7 @@ When "admin_notification" is enabled, determines how often email notifications a
 <dl>
 <dd>
 
-**method:** `Optional<BreachedPasswordDetectionMethodEnum>` 
+**pageBackground:** `BrandingThemePageBackground` 
     
 </dd>
 </dl>
@@ -16068,7 +17349,7 @@ When "admin_notification" is enabled, determines how often email notifications a
 <dl>
 <dd>
 
-**stage:** `Optional<BreachedPasswordDetectionStage>` 
+**widget:** `BrandingThemeWidget` 
     
 </dd>
 </dl>
@@ -16080,8 +17361,7 @@ When "admin_notification" is enabled, determines how often email notifications a
 </dl>
 </details>
 
-## AttackProtection BruteForceProtection
-<details><summary><code>client.attackProtection.bruteForceProtection.get() -> GetBruteForceSettingsResponseContent</code></summary>
+<details><summary><code>client.branding.themes.getDefault() -> GetBrandingDefaultThemeResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -16093,7 +17373,7 @@ When "admin_notification" is enabled, determines how often email notifications a
 <dl>
 <dd>
 
-Retrieve details of the Brute-force Protection configuration of your tenant.
+Retrieve default branding theme.
 </dd>
 </dl>
 </dd>
@@ -16108,7 +17388,7 @@ Retrieve details of the Brute-force Protection configuration of your tenant.
 <dd>
 
 ```java
-client.attackProtection().bruteForceProtection().get();
+client.branding().themes().getDefault();
 ```
 </dd>
 </dl>
@@ -16120,7 +17400,7 @@ client.attackProtection().bruteForceProtection().get();
 </dl>
 </details>
 
-<details><summary><code>client.attackProtection.bruteForceProtection.update(request) -> UpdateBruteForceSettingsResponseContent</code></summary>
+<details><summary><code>client.branding.themes.get(themeId) -> GetBrandingThemeResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -16132,7 +17412,7 @@ client.attackProtection().bruteForceProtection().get();
 <dl>
 <dd>
 
-Update the Brute-force Protection configuration of your tenant.
+Retrieve branding theme.
 </dd>
 </dl>
 </dd>
@@ -16147,11 +17427,7 @@ Update the Brute-force Protection configuration of your tenant.
 <dd>
 
 ```java
-client.attackProtection().bruteForceProtection().update(
-    UpdateBruteForceSettingsRequestContent
-        .builder()
-        .build()
-);
+client.branding().themes().get("themeId");
 ```
 </dd>
 </dl>
@@ -16166,42 +17442,7 @@ client.attackProtection().bruteForceProtection().update(
 <dl>
 <dd>
 
-**enabled:** `Optional<Boolean>` — Whether or not brute force attack protections are active.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**shields:** `Optional<List<BruteForceProtectionShieldsEnum>>` 
-
-Action to take when a brute force protection threshold is violated.
-        Possible values: <code>block</code>, <code>user_notification</code>.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**allowlist:** `Optional<List<String>>` — List of trusted IP addresses that will not have attack protection enforced against them.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**mode:** `Optional<BruteForceProtectionModeEnum>` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**maxAttempts:** `Optional<Integer>` — Maximum number of unsuccessful attempts.
+**themeId:** `String` — The ID of the theme
     
 </dd>
 </dl>
@@ -16213,8 +17454,7 @@ Action to take when a brute force protection threshold is violated.
 </dl>
 </details>
 
-## AttackProtection Captcha
-<details><summary><code>client.attackProtection.captcha.get() -> GetAttackProtectionCaptchaResponseContent</code></summary>
+<details><summary><code>client.branding.themes.delete(themeId)</code></summary>
 <dl>
 <dd>
 
@@ -16226,7 +17466,7 @@ Action to take when a brute force protection threshold is violated.
 <dl>
 <dd>
 
-Get the CAPTCHA configuration for your client.
+Delete branding theme.
 </dd>
 </dl>
 </dd>
@@ -16241,19 +17481,34 @@ Get the CAPTCHA configuration for your client.
 <dd>
 
 ```java
-client.attackProtection().captcha().get();
+client.branding().themes().delete("themeId");
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**themeId:** `String` — The ID of the theme
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
 
 </dd>
 </dl>
 </details>
 
-<details><summary><code>client.attackProtection.captcha.update(request) -> UpdateAttackProtectionCaptchaResponseContent</code></summary>
+<details><summary><code>client.branding.themes.update(themeId, request) -> UpdateBrandingThemeResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -16265,7 +17520,7 @@ client.attackProtection().captcha().get();
 <dl>
 <dd>
 
-Update existing CAPTCHA configuration for your client.
+Update branding theme.
 </dd>
 </dl>
 </dd>
@@ -16280,9 +17535,113 @@ Update existing CAPTCHA configuration for your client.
 <dd>
 
 ```java
-client.attackProtection().captcha().update(
-    UpdateAttackProtectionCaptchaRequestContent
+client.branding().themes().update(
+    "themeId",
+    UpdateBrandingThemeRequestContent
         .builder()
+        .borders(
+            BrandingThemeBorders
+                .builder()
+                .buttonBorderRadius(1.1)
+                .buttonBorderWeight(1.1)
+                .buttonsStyle(BrandingThemeBordersButtonsStyleEnum.PILL)
+                .inputBorderRadius(1.1)
+                .inputBorderWeight(1.1)
+                .inputsStyle(BrandingThemeBordersInputsStyleEnum.PILL)
+                .showWidgetShadow(true)
+                .widgetBorderWeight(1.1)
+                .widgetCornerRadius(1.1)
+                .build()
+        )
+        .colors(
+            BrandingThemeColors
+                .builder()
+                .bodyText("body_text")
+                .error("error")
+                .header("header")
+                .icons("icons")
+                .inputBackground("input_background")
+                .inputBorder("input_border")
+                .inputFilledText("input_filled_text")
+                .inputLabelsPlaceholders("input_labels_placeholders")
+                .linksFocusedComponents("links_focused_components")
+                .primaryButton("primary_button")
+                .primaryButtonLabel("primary_button_label")
+                .secondaryButtonBorder("secondary_button_border")
+                .secondaryButtonLabel("secondary_button_label")
+                .success("success")
+                .widgetBackground("widget_background")
+                .widgetBorder("widget_border")
+                .build()
+        )
+        .fonts(
+            BrandingThemeFonts
+                .builder()
+                .bodyText(
+                    BrandingThemeFontBodyText
+                        .builder()
+                        .bold(true)
+                        .size(1.1)
+                        .build()
+                )
+                .buttonsText(
+                    BrandingThemeFontButtonsText
+                        .builder()
+                        .bold(true)
+                        .size(1.1)
+                        .build()
+                )
+                .fontUrl("font_url")
+                .inputLabels(
+                    BrandingThemeFontInputLabels
+                        .builder()
+                        .bold(true)
+                        .size(1.1)
+                        .build()
+                )
+                .links(
+                    BrandingThemeFontLinks
+                        .builder()
+                        .bold(true)
+                        .size(1.1)
+                        .build()
+                )
+                .linksStyle(BrandingThemeFontLinksStyleEnum.NORMAL)
+                .referenceTextSize(1.1)
+                .subtitle(
+                    BrandingThemeFontSubtitle
+                        .builder()
+                        .bold(true)
+                        .size(1.1)
+                        .build()
+                )
+                .title(
+                    BrandingThemeFontTitle
+                        .builder()
+                        .bold(true)
+                        .size(1.1)
+                        .build()
+                )
+                .build()
+        )
+        .pageBackground(
+            BrandingThemePageBackground
+                .builder()
+                .backgroundColor("background_color")
+                .backgroundImageUrl("background_image_url")
+                .pageLayout(BrandingThemePageBackgroundPageLayoutEnum.CENTER)
+                .build()
+        )
+        .widget(
+            BrandingThemeWidget
+                .builder()
+                .headerTextAlignment(BrandingThemeWidgetHeaderTextAlignmentEnum.CENTER)
+                .logoHeight(1.1)
+                .logoPosition(BrandingThemeWidgetLogoPositionEnum.CENTER)
+                .logoUrl("logo_url")
+                .socialButtonsLayout(BrandingThemeWidgetSocialButtonsLayoutEnum.BOTTOM)
+                .build()
+        )
         .build()
 );
 ```
@@ -16299,7 +17658,7 @@ client.attackProtection().captcha().update(
 <dl>
 <dd>
 
-**activeProviderId:** `Optional<AttackProtectionCaptchaProviderId>` 
+**themeId:** `String` — The ID of the theme
     
 </dd>
 </dl>
@@ -16307,7 +17666,7 @@ client.attackProtection().captcha().update(
 <dl>
 <dd>
 
-**arkose:** `Optional<AttackProtectionUpdateCaptchaArkose>` 
+**borders:** `BrandingThemeBorders` 
     
 </dd>
 </dl>
@@ -16315,7 +17674,7 @@ client.attackProtection().captcha().update(
 <dl>
 <dd>
 
-**authChallenge:** `Optional<AttackProtectionCaptchaAuthChallengeRequest>` 
+**colors:** `BrandingThemeColors` 
     
 </dd>
 </dl>
@@ -16323,7 +17682,7 @@ client.attackProtection().captcha().update(
 <dl>
 <dd>
 
-**hcaptcha:** `Optional<AttackProtectionUpdateCaptchaHcaptcha>` 
+**displayName:** `Optional<String>` — Display Name
     
 </dd>
 </dl>
@@ -16331,7 +17690,7 @@ client.attackProtection().captcha().update(
 <dl>
 <dd>
 
-**friendlyCaptcha:** `Optional<AttackProtectionUpdateCaptchaFriendlyCaptcha>` 
+**fonts:** `BrandingThemeFonts` 
     
 </dd>
 </dl>
@@ -16339,7 +17698,7 @@ client.attackProtection().captcha().update(
 <dl>
 <dd>
 
-**recaptchaEnterprise:** `Optional<AttackProtectionUpdateCaptchaRecaptchaEnterprise>` 
+**identifiers:** `Optional<BrandingThemeIdentifiers>` 
     
 </dd>
 </dl>
@@ -16347,7 +17706,7 @@ client.attackProtection().captcha().update(
 <dl>
 <dd>
 
-**recaptchaV2:** `Optional<AttackProtectionUpdateCaptchaRecaptchaV2>` 
+**pageBackground:** `BrandingThemePageBackground` 
     
 </dd>
 </dl>
@@ -16355,7 +17714,7 @@ client.attackProtection().captcha().update(
 <dl>
 <dd>
 
-**simpleCaptcha:** `Optional<Map<String, Object>>` 
+**widget:** `BrandingThemeWidget` 
     
 </dd>
 </dl>
@@ -16367,47 +17726,8 @@ client.attackProtection().captcha().update(
 </dl>
 </details>
 
-## AttackProtection PhoneProviderProtection
-<details><summary><code>client.attackProtection.phoneProviderProtection.get() -> GetPhoneProviderProtectionResponseContent</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-Get the phone provider protection configuration for a tenant.
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### 🔌 Usage
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-```java
-client.attackProtection().phoneProviderProtection().get();
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.attackProtection.phoneProviderProtection.patch(request) -> PatchPhoneProviderProtectionResponseContent</code></summary>
+## Branding Phone Providers
+<details><summary><code>client.branding.phone.providers.list() -> ListBrandingPhoneProvidersResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -16419,7 +17739,7 @@ client.attackProtection().phoneProviderProtection().get();
 <dl>
 <dd>
 
-Update the phone provider protection configuration for a tenant.
+Retrieve a list of [phone providers](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers) details set for a Tenant. A list of fields to include or exclude may also be specified.
 </dd>
 </dl>
 </dd>
@@ -16434,10 +17754,10 @@ Update the phone provider protection configuration for a tenant.
 <dd>
 
 ```java
-client.attackProtection().phoneProviderProtection().patch(
-    PatchPhoneProviderProtectionRequestContent
+client.branding().phone().providers().list(
+    ListBrandingPhoneProvidersRequestParameters
         .builder()
-        .type(PhoneProviderProtectionBackoffStrategyEnum.EXPONENTIAL)
+        .disabled(true)
         .build()
 );
 ```
@@ -16454,7 +17774,7 @@ client.attackProtection().phoneProviderProtection().patch(
 <dl>
 <dd>
 
-**type:** `PhoneProviderProtectionBackoffStrategyEnum` 
+**disabled:** `Optional<Boolean>` — Whether the provider is enabled (false) or disabled (true).
     
 </dd>
 </dl>
@@ -16466,47 +17786,7 @@ client.attackProtection().phoneProviderProtection().patch(
 </dl>
 </details>
 
-## AttackProtection SuspiciousIpThrottling
-<details><summary><code>client.attackProtection.suspiciousIpThrottling.get() -> GetSuspiciousIpThrottlingSettingsResponseContent</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-Retrieve details of the Suspicious IP Throttling configuration of your tenant.
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### 🔌 Usage
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-```java
-client.attackProtection().suspiciousIpThrottling().get();
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.attackProtection.suspiciousIpThrottling.update(request) -> UpdateSuspiciousIpThrottlingSettingsResponseContent</code></summary>
+<details><summary><code>client.branding.phone.providers.create(request) -> CreateBrandingPhoneProviderResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -16518,7 +17798,8 @@ client.attackProtection().suspiciousIpThrottling().get();
 <dl>
 <dd>
 
-Update the details of the Suspicious IP Throttling configuration of your tenant.
+Create a [phone provider](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers).
+The `credentials` object requires different properties depending on the phone provider (which is specified using the `name` property).
 </dd>
 </dl>
 </dd>
@@ -16533,9 +17814,18 @@ Update the details of the Suspicious IP Throttling configuration of your tenant.
 <dd>
 
 ```java
-client.attackProtection().suspiciousIpThrottling().update(
-    UpdateSuspiciousIpThrottlingSettingsRequestContent
+client.branding().phone().providers().create(
+    CreateBrandingPhoneProviderRequestContent
         .builder()
+        .name(PhoneProviderNameEnum.TWILIO)
+        .credentials(
+            PhoneProviderCredentials.of(
+                TwilioProviderCredentials
+                    .builder()
+                    .authToken("auth_token")
+                    .build()
+            )
+        )
         .build()
 );
 ```
@@ -16552,7 +17842,7 @@ client.attackProtection().suspiciousIpThrottling().update(
 <dl>
 <dd>
 
-**enabled:** `Optional<Boolean>` — Whether or not suspicious IP throttling attack protections are active.
+**name:** `PhoneProviderNameEnum` 
     
 </dd>
 </dl>
@@ -16560,10 +17850,7 @@ client.attackProtection().suspiciousIpThrottling().update(
 <dl>
 <dd>
 
-**shields:** `Optional<List<SuspiciousIpThrottlingShieldsEnum>>` 
-
-Action to take when a suspicious IP throttling threshold is violated.
-          Possible values: <code>block</code>, <code>admin_notification</code>.
+**disabled:** `Optional<Boolean>` — Whether the provider is enabled (false) or disabled (true).
     
 </dd>
 </dl>
@@ -16571,7 +17858,7 @@ Action to take when a suspicious IP throttling threshold is violated.
 <dl>
 <dd>
 
-**allowlist:** `Optional<List<String>>` 
+**configuration:** `Optional<PhoneProviderConfiguration>` 
     
 </dd>
 </dl>
@@ -16579,7 +17866,7 @@ Action to take when a suspicious IP throttling threshold is violated.
 <dl>
 <dd>
 
-**stage:** `Optional<SuspiciousIpThrottlingStage>` 
+**credentials:** `PhoneProviderCredentials` 
     
 </dd>
 </dl>
@@ -16591,11 +17878,24 @@ Action to take when a suspicious IP throttling threshold is violated.
 </dl>
 </details>
 
-## Branding Templates
-<details><summary><code>client.branding.templates.getUniversalLogin() -> GetUniversalLoginTemplateResponseContent</code></summary>
+<details><summary><code>client.branding.phone.providers.get(id) -> GetBrandingPhoneProviderResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
 <dl>
 <dd>
 
+Retrieve [phone provider](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers) details. A list of fields to include or exclude may also be specified.
+</dd>
+</dl>
+</dd>
+</dl>
+
 #### 🔌 Usage
 
 <dl>
@@ -16605,19 +17905,34 @@ Action to take when a suspicious IP throttling threshold is violated.
 <dd>
 
 ```java
-client.branding().templates().getUniversalLogin();
+client.branding().phone().providers().get("id");
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` 
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
 
 </dd>
 </dl>
 </details>
 
-<details><summary><code>client.branding.templates.updateUniversalLogin(request)</code></summary>
+<details><summary><code>client.branding.phone.providers.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -16629,30 +17944,7 @@ client.branding().templates().getUniversalLogin();
 <dl>
 <dd>
 
-Update the Universal Login branding template.
-
-When `content-type` header is set to `application/json`:
-
-```json
-{
-  "template": "<!DOCTYPE html>{% assign resolved_dir = dir | default: \"auto\" %}<html lang=\"{{locale}}\" dir=\"{{resolved_dir}}\"><head>{%- auth0:head -%}</head><body class=\"_widget-auto-layout\">{%- auth0:widget -%}</body></html>"
-}
-```
-
-When `content-type` header is set to `text/html`:
-
-```html
-<!DOCTYPE html>
-{% assign resolved_dir = dir | default: "auto" %}
-<html lang="{{locale}}" dir="{{resolved_dir}}">
-  <head>
-    {%- auth0:head -%}
-  </head>
-  <body class="_widget-auto-layout">
-    {%- auth0:widget -%}
-  </body>
-</html>
-```
+Delete the configured phone provider.
 </dd>
 </dl>
 </dd>
@@ -16667,9 +17959,7 @@ When `content-type` header is set to `text/html`:
 <dd>
 
 ```java
-client.branding().templates().updateUniversalLogin(
-    UpdateUniversalLoginTemplateRequestContent.of("string")
-);
+client.branding().phone().providers().delete("id");
 ```
 </dd>
 </dl>
@@ -16684,7 +17974,7 @@ client.branding().templates().updateUniversalLogin(
 <dl>
 <dd>
 
-**request:** `UpdateUniversalLoginTemplateRequestContent` 
+**id:** `String` 
     
 </dd>
 </dl>
@@ -16696,11 +17986,11 @@ client.branding().templates().updateUniversalLogin(
 </dl>
 </details>
 
-<details><summary><code>client.branding.templates.deleteUniversalLogin()</code></summary>
+<details><summary><code>client.branding.phone.providers.update(id, request) -> UpdateBrandingPhoneProviderResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 🔌 Usage
+#### 📝 Description
 
 <dl>
 <dd>
@@ -16708,25 +17998,14 @@ client.branding().templates().updateUniversalLogin(
 <dl>
 <dd>
 
-```java
-client.branding().templates().deleteUniversalLogin();
-```
-</dd>
-</dl>
+Update a [phone provider](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers).
+The `credentials` object requires different properties depending on the phone provider (which is specified using the `name` property).
 </dd>
 </dl>
-
-
 </dd>
 </dl>
-</details>
-
-## Branding Themes
-<details><summary><code>client.branding.themes.create(request) -> CreateBrandingThemeResponseContent</code></summary>
-<dl>
-<dd>
 
-#### 📝 Description
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -16734,13 +18013,20 @@ client.branding().templates().deleteUniversalLogin();
 <dl>
 <dd>
 
-Create branding theme.
+```java
+client.branding().phone().providers().update(
+    "id",
+    UpdateBrandingPhoneProviderRequestContent
+        .builder()
+        .build()
+);
+```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -16748,130 +18034,31 @@ Create branding theme.
 <dl>
 <dd>
 
-```java
-client.branding().themes().create(
-    CreateBrandingThemeRequestContent
-        .builder()
-        .borders(
-            BrandingThemeBorders
-                .builder()
-                .buttonBorderRadius(1.1)
-                .buttonBorderWeight(1.1)
-                .buttonsStyle(BrandingThemeBordersButtonsStyleEnum.PILL)
-                .inputBorderRadius(1.1)
-                .inputBorderWeight(1.1)
-                .inputsStyle(BrandingThemeBordersInputsStyleEnum.PILL)
-                .showWidgetShadow(true)
-                .widgetBorderWeight(1.1)
-                .widgetCornerRadius(1.1)
-                .build()
-        )
-        .colors(
-            BrandingThemeColors
-                .builder()
-                .bodyText("body_text")
-                .error("error")
-                .header("header")
-                .icons("icons")
-                .inputBackground("input_background")
-                .inputBorder("input_border")
-                .inputFilledText("input_filled_text")
-                .inputLabelsPlaceholders("input_labels_placeholders")
-                .linksFocusedComponents("links_focused_components")
-                .primaryButton("primary_button")
-                .primaryButtonLabel("primary_button_label")
-                .secondaryButtonBorder("secondary_button_border")
-                .secondaryButtonLabel("secondary_button_label")
-                .success("success")
-                .widgetBackground("widget_background")
-                .widgetBorder("widget_border")
-                .build()
-        )
-        .fonts(
-            BrandingThemeFonts
-                .builder()
-                .bodyText(
-                    BrandingThemeFontBodyText
-                        .builder()
-                        .bold(true)
-                        .size(1.1)
-                        .build()
-                )
-                .buttonsText(
-                    BrandingThemeFontButtonsText
-                        .builder()
-                        .bold(true)
-                        .size(1.1)
-                        .build()
-                )
-                .fontUrl("font_url")
-                .inputLabels(
-                    BrandingThemeFontInputLabels
-                        .builder()
-                        .bold(true)
-                        .size(1.1)
-                        .build()
-                )
-                .links(
-                    BrandingThemeFontLinks
-                        .builder()
-                        .bold(true)
-                        .size(1.1)
-                        .build()
-                )
-                .linksStyle(BrandingThemeFontLinksStyleEnum.NORMAL)
-                .referenceTextSize(1.1)
-                .subtitle(
-                    BrandingThemeFontSubtitle
-                        .builder()
-                        .bold(true)
-                        .size(1.1)
-                        .build()
-                )
-                .title(
-                    BrandingThemeFontTitle
-                        .builder()
-                        .bold(true)
-                        .size(1.1)
-                        .build()
-                )
-                .build()
-        )
-        .pageBackground(
-            BrandingThemePageBackground
-                .builder()
-                .backgroundColor("background_color")
-                .backgroundImageUrl("background_image_url")
-                .pageLayout(BrandingThemePageBackgroundPageLayoutEnum.CENTER)
-                .build()
-        )
-        .widget(
-            BrandingThemeWidget
-                .builder()
-                .headerTextAlignment(BrandingThemeWidgetHeaderTextAlignmentEnum.CENTER)
-                .logoHeight(1.1)
-                .logoPosition(BrandingThemeWidgetLogoPositionEnum.CENTER)
-                .logoUrl("logo_url")
-                .socialButtonsLayout(BrandingThemeWidgetSocialButtonsLayoutEnum.BOTTOM)
-                .build()
-        )
-        .build()
-);
-```
+**id:** `String` 
+    
 </dd>
 </dl>
+
+<dl>
+<dd>
+
+**name:** `Optional<PhoneProviderNameEnum>` 
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**disabled:** `Optional<Boolean>` — Whether the provider is enabled (false) or disabled (true).
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**borders:** `BrandingThemeBorders` 
+**credentials:** `Optional<PhoneProviderCredentials>` 
     
 </dd>
 </dl>
@@ -16879,31 +18066,53 @@ client.branding().themes().create(
 <dl>
 <dd>
 
-**colors:** `BrandingThemeColors` 
+**configuration:** `Optional<PhoneProviderConfiguration>` 
     
 </dd>
 </dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.branding.phone.providers.test(id, request) -> CreatePhoneProviderSendTestResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
 
 <dl>
 <dd>
 
-**displayName:** `Optional<String>` — Display Name
-    
+```java
+client.branding().phone().providers().test(
+    "id",
+    CreatePhoneProviderSendTestRequestContent
+        .builder()
+        .to("to")
+        .build()
+);
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**fonts:** `BrandingThemeFonts` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**identifiers:** `Optional<BrandingThemeIdentifiers>` 
+**id:** `String` 
     
 </dd>
 </dl>
@@ -16911,7 +18120,7 @@ client.branding().themes().create(
 <dl>
 <dd>
 
-**pageBackground:** `BrandingThemePageBackground` 
+**to:** `String` — The recipient phone number to receive a given notification.
     
 </dd>
 </dl>
@@ -16919,7 +18128,7 @@ client.branding().themes().create(
 <dl>
 <dd>
 
-**widget:** `BrandingThemeWidget` 
+**deliveryMethod:** `Optional<PhoneProviderDeliveryMethodEnum>` 
     
 </dd>
 </dl>
@@ -16931,11 +18140,12 @@ client.branding().themes().create(
 </dl>
 </details>
 
-<details><summary><code>client.branding.themes.getDefault() -> GetBrandingDefaultThemeResponseContent</code></summary>
+## Branding Phone Templates
+<details><summary><code>client.branding.phone.templates.list() -> ListPhoneTemplatesResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -16943,13 +18153,20 @@ client.branding().themes().create(
 <dl>
 <dd>
 
-Retrieve default branding theme.
+```java
+client.branding().phone().templates().list(
+    ListPhoneTemplatesRequestParameters
+        .builder()
+        .disabled(true)
+        .build()
+);
+```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -16957,9 +18174,8 @@ Retrieve default branding theme.
 <dl>
 <dd>
 
-```java
-client.branding().themes().getDefault();
-```
+**disabled:** `Optional<Boolean>` — Whether the template is enabled (false) or disabled (true).
+    
 </dd>
 </dl>
 </dd>
@@ -16970,11 +18186,11 @@ client.branding().themes().getDefault();
 </dl>
 </details>
 
-<details><summary><code>client.branding.themes.get(themeId) -> GetBrandingThemeResponseContent</code></summary>
+<details><summary><code>client.branding.phone.templates.create(request) -> CreatePhoneTemplateResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -16982,13 +18198,19 @@ client.branding().themes().getDefault();
 <dl>
 <dd>
 
-Retrieve branding theme.
+```java
+client.branding().phone().templates().create(
+    CreatePhoneTemplateRequestContent
+        .builder()
+        .build()
+);
+```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -16996,23 +18218,23 @@ Retrieve branding theme.
 <dl>
 <dd>
 
-```java
-client.branding().themes().get("themeId");
-```
-</dd>
-</dl>
+**type:** `Optional<PhoneTemplateNotificationTypeEnum>` 
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**disabled:** `Optional<Boolean>` — Whether the template is enabled (false) or disabled (true).
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**themeId:** `String` — The ID of the theme
+**content:** `Optional<PhoneTemplateContent>` 
     
 </dd>
 </dl>
@@ -17024,24 +18246,10 @@ client.branding().themes().get("themeId");
 </dl>
 </details>
 
-<details><summary><code>client.branding.themes.delete(themeId)</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
+<details><summary><code>client.branding.phone.templates.get(id) -> GetPhoneTemplateResponseContent</code></summary>
 <dl>
 <dd>
 
-Delete branding theme.
-</dd>
-</dl>
-</dd>
-</dl>
-
 #### 🔌 Usage
 
 <dl>
@@ -17051,7 +18259,7 @@ Delete branding theme.
 <dd>
 
 ```java
-client.branding().themes().delete("themeId");
+client.branding().phone().templates().get("id");
 ```
 </dd>
 </dl>
@@ -17066,7 +18274,7 @@ client.branding().themes().delete("themeId");
 <dl>
 <dd>
 
-**themeId:** `String` — The ID of the theme
+**id:** `String` 
     
 </dd>
 </dl>
@@ -17078,24 +18286,10 @@ client.branding().themes().delete("themeId");
 </dl>
 </details>
 
-<details><summary><code>client.branding.themes.update(themeId, request) -> UpdateBrandingThemeResponseContent</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
+<details><summary><code>client.branding.phone.templates.delete(id)</code></summary>
 <dl>
 <dd>
 
-Update branding theme.
-</dd>
-</dl>
-</dd>
-</dl>
-
 #### 🔌 Usage
 
 <dl>
@@ -17105,115 +18299,7 @@ Update branding theme.
 <dd>
 
 ```java
-client.branding().themes().update(
-    "themeId",
-    UpdateBrandingThemeRequestContent
-        .builder()
-        .borders(
-            BrandingThemeBorders
-                .builder()
-                .buttonBorderRadius(1.1)
-                .buttonBorderWeight(1.1)
-                .buttonsStyle(BrandingThemeBordersButtonsStyleEnum.PILL)
-                .inputBorderRadius(1.1)
-                .inputBorderWeight(1.1)
-                .inputsStyle(BrandingThemeBordersInputsStyleEnum.PILL)
-                .showWidgetShadow(true)
-                .widgetBorderWeight(1.1)
-                .widgetCornerRadius(1.1)
-                .build()
-        )
-        .colors(
-            BrandingThemeColors
-                .builder()
-                .bodyText("body_text")
-                .error("error")
-                .header("header")
-                .icons("icons")
-                .inputBackground("input_background")
-                .inputBorder("input_border")
-                .inputFilledText("input_filled_text")
-                .inputLabelsPlaceholders("input_labels_placeholders")
-                .linksFocusedComponents("links_focused_components")
-                .primaryButton("primary_button")
-                .primaryButtonLabel("primary_button_label")
-                .secondaryButtonBorder("secondary_button_border")
-                .secondaryButtonLabel("secondary_button_label")
-                .success("success")
-                .widgetBackground("widget_background")
-                .widgetBorder("widget_border")
-                .build()
-        )
-        .fonts(
-            BrandingThemeFonts
-                .builder()
-                .bodyText(
-                    BrandingThemeFontBodyText
-                        .builder()
-                        .bold(true)
-                        .size(1.1)
-                        .build()
-                )
-                .buttonsText(
-                    BrandingThemeFontButtonsText
-                        .builder()
-                        .bold(true)
-                        .size(1.1)
-                        .build()
-                )
-                .fontUrl("font_url")
-                .inputLabels(
-                    BrandingThemeFontInputLabels
-                        .builder()
-                        .bold(true)
-                        .size(1.1)
-                        .build()
-                )
-                .links(
-                    BrandingThemeFontLinks
-                        .builder()
-                        .bold(true)
-                        .size(1.1)
-                        .build()
-                )
-                .linksStyle(BrandingThemeFontLinksStyleEnum.NORMAL)
-                .referenceTextSize(1.1)
-                .subtitle(
-                    BrandingThemeFontSubtitle
-                        .builder()
-                        .bold(true)
-                        .size(1.1)
-                        .build()
-                )
-                .title(
-                    BrandingThemeFontTitle
-                        .builder()
-                        .bold(true)
-                        .size(1.1)
-                        .build()
-                )
-                .build()
-        )
-        .pageBackground(
-            BrandingThemePageBackground
-                .builder()
-                .backgroundColor("background_color")
-                .backgroundImageUrl("background_image_url")
-                .pageLayout(BrandingThemePageBackgroundPageLayoutEnum.CENTER)
-                .build()
-        )
-        .widget(
-            BrandingThemeWidget
-                .builder()
-                .headerTextAlignment(BrandingThemeWidgetHeaderTextAlignmentEnum.CENTER)
-                .logoHeight(1.1)
-                .logoPosition(BrandingThemeWidgetLogoPositionEnum.CENTER)
-                .logoUrl("logo_url")
-                .socialButtonsLayout(BrandingThemeWidgetSocialButtonsLayoutEnum.BOTTOM)
-                .build()
-        )
-        .build()
-);
+client.branding().phone().templates().delete("id");
 ```
 </dd>
 </dl>
@@ -17228,47 +18314,52 @@ client.branding().themes().update(
 <dl>
 <dd>
 
-**themeId:** `String` — The ID of the theme
+**id:** `String` 
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**borders:** `BrandingThemeBorders` 
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.branding.phone.templates.update(id, request) -> UpdatePhoneTemplateResponseContent</code></summary>
 <dl>
 <dd>
 
-**colors:** `BrandingThemeColors` 
-    
-</dd>
-</dl>
+#### 🔌 Usage
 
 <dl>
 <dd>
 
-**displayName:** `Optional<String>` — Display Name
-    
+<dl>
+<dd>
+
+```java
+client.branding().phone().templates().update(
+    "id",
+    UpdatePhoneTemplateRequestContent
+        .builder()
+        .build()
+);
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**fonts:** `BrandingThemeFonts` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**identifiers:** `Optional<BrandingThemeIdentifiers>` 
+**id:** `String` 
     
 </dd>
 </dl>
@@ -17276,7 +18367,7 @@ client.branding().themes().update(
 <dl>
 <dd>
 
-**pageBackground:** `BrandingThemePageBackground` 
+**content:** `Optional<PartialPhoneTemplateContent>` 
     
 </dd>
 </dl>
@@ -17284,7 +18375,7 @@ client.branding().themes().update(
 <dl>
 <dd>
 
-**widget:** `BrandingThemeWidget` 
+**disabled:** `Optional<Boolean>` — Whether the template is enabled (false) or disabled (true).
     
 </dd>
 </dl>
@@ -17296,12 +18387,11 @@ client.branding().themes().update(
 </dl>
 </details>
 
-## Branding Phone Providers
-<details><summary><code>client.branding.phone.providers.list() -> ListBrandingPhoneProvidersResponseContent</code></summary>
+<details><summary><code>client.branding.phone.templates.reset(id, request) -> ResetPhoneTemplateResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -17309,13 +18399,20 @@ client.branding().themes().update(
 <dl>
 <dd>
 
-Retrieve a list of [phone providers](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers) details set for a Tenant. A list of fields to include or exclude may also be specified.
+```java
+client.branding().phone().templates().reset(
+    "id",
+    ResetPhoneTemplateRequestContent.of(new 
+    HashMap<String, Object>() {{put("key", "value");
+    }})
+);
+```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -17323,28 +18420,15 @@ Retrieve a list of [phone providers](https://auth0.com/docs/customize/phone-mess
 <dl>
 <dd>
 
-```java
-client.branding().phone().providers().list(
-    ListBrandingPhoneProvidersRequestParameters
-        .builder()
-        .disabled(true)
-        .build()
-);
-```
-</dd>
-</dl>
+**id:** `String` 
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-**disabled:** `Optional<Boolean>` — Whether the provider is enabled (false) or disabled (true).
+**request:** `Object` 
     
 </dd>
 </dl>
@@ -17356,25 +18440,10 @@ client.branding().phone().providers().list(
 </dl>
 </details>
 
-<details><summary><code>client.branding.phone.providers.create(request) -> CreateBrandingPhoneProviderResponseContent</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
+<details><summary><code>client.branding.phone.templates.test(id, request) -> CreatePhoneTemplateTestNotificationResponseContent</code></summary>
 <dl>
 <dd>
 
-Create a [phone provider](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers).
-The `credentials` object requires different properties depending on the phone provider (which is specified using the `name` property).
-</dd>
-</dl>
-</dd>
-</dl>
-
 #### 🔌 Usage
 
 <dl>
@@ -17384,18 +18453,11 @@ The `credentials` object requires different properties depending on the phone pr
 <dd>
 
 ```java
-client.branding().phone().providers().create(
-    CreateBrandingPhoneProviderRequestContent
+client.branding().phone().templates().test(
+    "id",
+    CreatePhoneTemplateTestNotificationRequestContent
         .builder()
-        .name(PhoneProviderNameEnum.TWILIO)
-        .credentials(
-            PhoneProviderCredentials.of(
-                TwilioProviderCredentials
-                    .builder()
-                    .authToken("auth_token")
-                    .build()
-            )
-        )
+        .to("to")
         .build()
 );
 ```
@@ -17412,15 +18474,7 @@ client.branding().phone().providers().create(
 <dl>
 <dd>
 
-**name:** `PhoneProviderNameEnum` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**disabled:** `Optional<Boolean>` — Whether the provider is enabled (false) or disabled (true).
+**id:** `String` 
     
 </dd>
 </dl>
@@ -17428,7 +18482,7 @@ client.branding().phone().providers().create(
 <dl>
 <dd>
 
-**configuration:** `Optional<PhoneProviderConfiguration>` 
+**to:** `String` — Destination of the testing phone notification
     
 </dd>
 </dl>
@@ -17436,7 +18490,7 @@ client.branding().phone().providers().create(
 <dl>
 <dd>
 
-**credentials:** `PhoneProviderCredentials` 
+**deliveryMethod:** `Optional<PhoneProviderDeliveryMethodEnum>` — Medium to use to send the notification
     
 </dd>
 </dl>
@@ -17448,11 +18502,12 @@ client.branding().phone().providers().create(
 </dl>
 </details>
 
-<details><summary><code>client.branding.phone.providers.get(id) -> GetBrandingPhoneProviderResponseContent</code></summary>
+## ClientGrants Organizations
+<details><summary><code>client.clientGrants.organizations.list(id) -> SyncPagingIterable&amp;lt;Organization&amp;gt;</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -17460,13 +18515,23 @@ client.branding().phone().providers().create(
 <dl>
 <dd>
 
-Retrieve [phone provider](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers) details. A list of fields to include or exclude may also be specified.
+```java
+client.clientGrants().organizations().list(
+    "id",
+    ListClientGrantOrganizationsRequestParameters
+        .builder()
+        .includeTotals(true)
+        .from("from")
+        .take(1)
+        .build()
+);
+```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -17474,23 +18539,31 @@ Retrieve [phone provider](https://auth0.com/docs/customize/phone-messages/config
 <dl>
 <dd>
 
-```java
-client.branding().phone().providers().get("id");
-```
+**id:** `String` — ID of the client grant
+    
 </dd>
 </dl>
+
+<dl>
+<dd>
+
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**from:** `Optional<String>` — Optional Id from which to start selection.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**id:** `String` 
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
     
 </dd>
 </dl>
@@ -17502,7 +18575,8 @@ client.branding().phone().providers().get("id");
 </dl>
 </details>
 
-<details><summary><code>client.branding.phone.providers.delete(id)</code></summary>
+## Clients Credentials
+<details><summary><code>client.clients.credentials.list(clientId) -> List&amp;lt;ClientCredential&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -17514,7 +18588,9 @@ client.branding().phone().providers().get("id");
 <dl>
 <dd>
 
-Delete the configured phone provider.
+Get the details of a client credential.
+
+**Important**: To enable credentials to be used for a client authentication method, set the `client_authentication_methods` property on the client. To enable credentials to be used for JWT-Secured Authorization requests set the `signed_request_object` property on the client.
 </dd>
 </dl>
 </dd>
@@ -17529,7 +18605,7 @@ Delete the configured phone provider.
 <dd>
 
 ```java
-client.branding().phone().providers().delete("id");
+client.clients().credentials().list("client_id");
 ```
 </dd>
 </dl>
@@ -17544,7 +18620,7 @@ client.branding().phone().providers().delete("id");
 <dl>
 <dd>
 
-**id:** `String` 
+**clientId:** `String` — ID of the client.
     
 </dd>
 </dl>
@@ -17556,7 +18632,7 @@ client.branding().phone().providers().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.branding.phone.providers.update(id, request) -> UpdateBrandingPhoneProviderResponseContent</code></summary>
+<details><summary><code>client.clients.credentials.create(clientId, request) -> PostClientCredentialResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -17568,89 +18644,67 @@ client.branding().phone().providers().delete("id");
 <dl>
 <dd>
 
-Update a [phone provider](https://auth0.com/docs/customize/phone-messages/configure-phone-messaging-providers).
-The `credentials` object requires different properties depending on the phone provider (which is specified using the `name` property).
-</dd>
-</dl>
-</dd>
-</dl>
+Create a client credential associated to your application. Credentials can be used to configure Private Key JWT and mTLS authentication methods, as well as for JWT-secured Authorization requests.
 
-#### 🔌 Usage
+**Public Key**
 
-<dl>
-<dd>
+Public Key credentials can be used to set up Private Key JWT client authentication and JWT-secured Authorization requests.
 
-<dl>
-<dd>
+Sample: 
 
-```java
-client.branding().phone().providers().update(
-    "id",
-    UpdateBrandingPhoneProviderRequestContent
-        .builder()
-        .build()
-);
+```json
+{
+  "credential_type": "public_key",
+  "name": "string",
+  "pem": "string",
+  "alg": "RS256",
+  "parse_expiry_from_cert": false,
+  "expires_at": "2022-12-31T23:59:59Z"
+}
 ```
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### ⚙️ Parameters
-
-<dl>
-<dd>
 
-<dl>
-<dd>
+**Certificate (CA-signed & self-signed)**
 
-**id:** `String` 
-    
-</dd>
-</dl>
+Certificate credentials can be used to set up mTLS client authentication. CA-signed certificates can be configured either with a signed certificate or with just the certificate Subject DN.
 
-<dl>
-<dd>
+CA-signed Certificate Sample (pem): 
 
-**name:** `Optional<PhoneProviderNameEnum>` 
-    
-</dd>
-</dl>
+```json
+{
+  "credential_type": "x509_cert",
+  "name": "string",
+  "pem": "string"
+}
+```
 
-<dl>
-<dd>
+CA-signed Certificate Sample (subject_dn): 
 
-**disabled:** `Optional<Boolean>` — Whether the provider is enabled (false) or disabled (true).
-    
-</dd>
-</dl>
+```json
+{
+  "credential_type": "cert_subject_dn",
+  "name": "string",
+  "subject_dn": "string"
+}
+```
 
-<dl>
-<dd>
+Self-signed Certificate Sample: 
 
-**credentials:** `Optional<PhoneProviderCredentials>` 
-    
-</dd>
-</dl>
+```json
+{
+  "credential_type": "cert_subject_dn",
+  "name": "string",
+  "pem": "string"
+}
+```
 
-<dl>
-<dd>
+The credential will be created but not yet enabled for use until you set the corresponding properties in the client:
 
-**configuration:** `Optional<PhoneProviderConfiguration>` 
-    
-</dd>
-</dl>
+- To enable the credential for Private Key JWT or mTLS authentication methods, set the `client_authentication_methods` property on the client. For more information, read [Configure Private Key JWT Authentication](https://auth0.com/docs/get-started/applications/configure-private-key-jwt) and [Configure mTLS Authentication](https://auth0.com/docs/get-started/applications/configure-mtls)
+- To enable the credential for JWT-secured Authorization requests, set the `signed_request_object`property on the client. For more information, read [Configure JWT-secured Authorization Requests (JAR)](https://auth0.com/docs/get-started/applications/configure-jar)
 </dd>
 </dl>
-
-
 </dd>
 </dl>
-</details>
-
-<details><summary><code>client.branding.phone.providers.test(id, request) -> CreatePhoneProviderSendTestResponseContent</code></summary>
-<dl>
-<dd>
 
 #### 🔌 Usage
 
@@ -17659,13 +18713,13 @@ client.branding().phone().providers().update(
 
 <dl>
 <dd>
-
-```java
-client.branding().phone().providers().test(
-    "id",
-    CreatePhoneProviderSendTestRequestContent
+
+```java
+client.clients().credentials().create(
+    "client_id",
+    PostClientCredentialRequestContent
         .builder()
-        .to("to")
+        .credentialType(ClientCredentialTypeEnum.PUBLIC_KEY)
         .build()
 );
 ```
@@ -17682,7 +18736,7 @@ client.branding().phone().providers().test(
 <dl>
 <dd>
 
-**id:** `String` 
+**clientId:** `String` — ID of the client.
     
 </dd>
 </dl>
@@ -17690,7 +18744,7 @@ client.branding().phone().providers().test(
 <dl>
 <dd>
 
-**to:** `String` — The recipient phone number to receive a given notification.
+**credentialType:** `ClientCredentialTypeEnum` 
     
 </dd>
 </dl>
@@ -17698,53 +18752,55 @@ client.branding().phone().providers().test(
 <dl>
 <dd>
 
-**deliveryMethod:** `Optional<PhoneProviderDeliveryMethodEnum>` 
+**name:** `Optional<String>` — Friendly name for a credential.
     
 </dd>
 </dl>
-</dd>
-</dl>
 
+<dl>
+<dd>
 
+**subjectDn:** `Optional<String>` — Subject Distinguished Name. Mutually exclusive with `pem` property. Applies to `cert_subject_dn` credential type.
+    
 </dd>
 </dl>
-</details>
 
-## Branding Phone Templates
-<details><summary><code>client.branding.phone.templates.list() -> ListPhoneTemplatesResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 🔌 Usage
+**pem:** `Optional<String>` — PEM-formatted public key (SPKI and PKCS1) or X509 certificate. Must be JSON escaped.
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**alg:** `Optional<PublicKeyCredentialAlgorithmEnum>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-```java
-client.branding().phone().templates().list(
-    ListPhoneTemplatesRequestParameters
-        .builder()
-        .disabled(true)
-        .build()
-);
-```
-</dd>
-</dl>
+**parseExpiryFromCert:** `Optional<Boolean>` — Parse expiry from x509 certificate. If true, attempts to parse the expiry date from the provided PEM. Applies to `public_key` credential type.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**expiresAt:** `Optional<OffsetDateTime>` — The ISO 8601 formatted date representing the expiration of the credential. If not specified (not recommended), the credential never expires. Applies to `public_key` credential type.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**disabled:** `Optional<Boolean>` — Whether the template is enabled (false) or disabled (true).
+**kid:** `Optional<String>` — Optional kid (Key ID), used to uniquely identify the credential. If not specified, a kid value will be auto-generated. The kid header parameter in JWTs sent by your client should match this value. Valid format is [0-9a-zA-Z-_]{10,64}
     
 </dd>
 </dl>
@@ -17756,11 +18812,11 @@ client.branding().phone().templates().list(
 </dl>
 </details>
 
-<details><summary><code>client.branding.phone.templates.create(request) -> CreatePhoneTemplateResponseContent</code></summary>
+<details><summary><code>client.clients.credentials.get(clientId, credentialId) -> GetClientCredentialResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 🔌 Usage
+#### 📝 Description
 
 <dl>
 <dd>
@@ -17768,19 +18824,15 @@ client.branding().phone().templates().list(
 <dl>
 <dd>
 
-```java
-client.branding().phone().templates().create(
-    CreatePhoneTemplateRequestContent
-        .builder()
-        .build()
-);
-```
+Get the details of a client credential.
+
+**Important**: To enable credentials to be used for a client authentication method, set the `client_authentication_methods` property on the client. To enable credentials to be used for JWT-Secured Authorization requests set the `signed_request_object` property on the client.
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -17788,15 +18840,23 @@ client.branding().phone().templates().create(
 <dl>
 <dd>
 
-**type:** `Optional<PhoneTemplateNotificationTypeEnum>` 
-    
+```java
+client.clients().credentials().get("client_id", "credential_id");
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**disabled:** `Optional<Boolean>` — Whether the template is enabled (false) or disabled (true).
+<dl>
+<dd>
+
+**clientId:** `String` — ID of the client.
     
 </dd>
 </dl>
@@ -17804,7 +18864,7 @@ client.branding().phone().templates().create(
 <dl>
 <dd>
 
-**content:** `Optional<PhoneTemplateContent>` 
+**credentialId:** `String` — ID of the credential.
     
 </dd>
 </dl>
@@ -17816,11 +18876,11 @@ client.branding().phone().templates().create(
 </dl>
 </details>
 
-<details><summary><code>client.branding.phone.templates.get(id) -> GetPhoneTemplateResponseContent</code></summary>
+<details><summary><code>client.clients.credentials.delete(clientId, credentialId)</code></summary>
 <dl>
 <dd>
 
-#### 🔌 Usage
+#### 📝 Description
 
 <dl>
 <dd>
@@ -17828,15 +18888,13 @@ client.branding().phone().templates().create(
 <dl>
 <dd>
 
-```java
-client.branding().phone().templates().get("id");
-```
+Delete a client credential you previously created. May be enabled or disabled. For more information, read <a href="https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow">Client Credential Flow</a>.
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -17844,23 +18902,15 @@ client.branding().phone().templates().get("id");
 <dl>
 <dd>
 
-**id:** `String` 
-    
-</dd>
-</dl>
+```java
+client.clients().credentials().delete("client_id", "credential_id");
+```
 </dd>
 </dl>
-
-
 </dd>
 </dl>
-</details>
-
-<details><summary><code>client.branding.phone.templates.delete(id)</code></summary>
-<dl>
-<dd>
 
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -17868,23 +18918,15 @@ client.branding().phone().templates().get("id");
 <dl>
 <dd>
 
-```java
-client.branding().phone().templates().delete("id");
-```
-</dd>
-</dl>
+**clientId:** `String` — ID of the client.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
-<dl>
-<dd>
-
-**id:** `String` 
+**credentialId:** `String` — ID of the credential to delete.
     
 </dd>
 </dl>
@@ -17896,10 +18938,24 @@ client.branding().phone().templates().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.branding.phone.templates.update(id, request) -> UpdatePhoneTemplateResponseContent</code></summary>
+<details><summary><code>client.clients.credentials.update(clientId, credentialId, request) -> PatchClientCredentialResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
 <dl>
 <dd>
 
+<dl>
+<dd>
+
+Change a client credential you previously created. May be enabled or disabled. For more information, read <a href="https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow">Client Credential Flow</a>.
+</dd>
+</dl>
+</dd>
+</dl>
+
 #### 🔌 Usage
 
 <dl>
@@ -17909,9 +18965,10 @@ client.branding().phone().templates().delete("id");
 <dd>
 
 ```java
-client.branding().phone().templates().update(
-    "id",
-    UpdatePhoneTemplateRequestContent
+client.clients().credentials().update(
+    "client_id",
+    "credential_id",
+    PatchClientCredentialRequestContent
         .builder()
         .build()
 );
@@ -17929,7 +18986,7 @@ client.branding().phone().templates().update(
 <dl>
 <dd>
 
-**id:** `String` 
+**clientId:** `String` — ID of the client.
     
 </dd>
 </dl>
@@ -17937,7 +18994,7 @@ client.branding().phone().templates().update(
 <dl>
 <dd>
 
-**content:** `Optional<PartialPhoneTemplateContent>` 
+**credentialId:** `String` — ID of the credential.
     
 </dd>
 </dl>
@@ -17945,7 +19002,7 @@ client.branding().phone().templates().update(
 <dl>
 <dd>
 
-**disabled:** `Optional<Boolean>` — Whether the template is enabled (false) or disabled (true).
+**expiresAt:** `Optional<OffsetDateTime>` — The ISO 8601 formatted date representing the expiration of the credential.
     
 </dd>
 </dl>
@@ -17957,10 +19014,28 @@ client.branding().phone().templates().update(
 </dl>
 </details>
 
-<details><summary><code>client.branding.phone.templates.reset(id, request) -> ResetPhoneTemplateResponseContent</code></summary>
+## Clients Connections
+<details><summary><code>client.clients.connections.get(id) -> SyncPagingIterable&amp;lt;ConnectionForList&amp;gt;</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
 <dl>
 <dd>
 
+Retrieve all connections that are enabled for the specified [Application](https://www.auth0.com/docs/get-started/applications), using checkpoint pagination. A list of fields to include or exclude for each connection may also be specified.
+
+- This endpoint requires the `read:connections` scope and any one of `read:clients` or `read:client_summary`.
+- **Note**: The first time you call this endpoint, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no further results are remaining.
+</dd>
+</dl>
+</dd>
+</dl>
+
 #### 🔌 Usage
 
 <dl>
@@ -17970,11 +19045,18 @@ client.branding().phone().templates().update(
 <dd>
 
 ```java
-client.branding().phone().templates().reset(
+client.clients().connections().get(
     "id",
-    ResetPhoneTemplateRequestContent.of(new 
-    HashMap<String, Object>() {{put("key", "value");
-    }})
+    ConnectionsGetRequest
+        .builder()
+        .from("from")
+        .take(1)
+        .fields("fields")
+        .includeFields(true)
+        .strategy(
+            Arrays.asList(ConnectionStrategyEnum.AD)
+        )
+        .build()
 );
 ```
 </dd>
@@ -17990,7 +19072,7 @@ client.branding().phone().templates().reset(
 <dl>
 <dd>
 
-**id:** `String` 
+**id:** `String` — ID of the client for which to retrieve enabled connections.
     
 </dd>
 </dl>
@@ -17998,53 +19080,23 @@ client.branding().phone().templates().reset(
 <dl>
 <dd>
 
-**request:** `Object` 
+**strategy:** `Optional<ConnectionStrategyEnum>` — Provide strategies to only retrieve connections with such strategies
     
 </dd>
 </dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.branding.phone.templates.test(id, request) -> CreatePhoneTemplateTestNotificationResponseContent</code></summary>
-<dl>
-<dd>
-
-#### 🔌 Usage
-
-<dl>
-<dd>
 
 <dl>
 <dd>
 
-```java
-client.branding().phone().templates().test(
-    "id",
-    CreatePhoneTemplateTestNotificationRequestContent
-        .builder()
-        .to("to")
-        .build()
-);
-```
-</dd>
-</dl>
+**from:** `Optional<String>` — Optional Id from which to start selection.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
-<dl>
-<dd>
-
-**id:** `String` 
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
     
 </dd>
 </dl>
@@ -18052,7 +19104,7 @@ client.branding().phone().templates().test(
 <dl>
 <dd>
 
-**to:** `String` — Destination of the testing phone notification
+**fields:** `Optional<String>` — A comma separated list of fields to include or exclude (depending on include_fields) from the result, empty to retrieve all fields
     
 </dd>
 </dl>
@@ -18060,7 +19112,7 @@ client.branding().phone().templates().test(
 <dl>
 <dd>
 
-**deliveryMethod:** `Optional<PhoneProviderDeliveryMethodEnum>` — Medium to use to send the notification
+**includeFields:** `Optional<Boolean>` — <code>true</code> if the fields specified are to be included in the result, <code>false</code> otherwise (defaults to <code>true</code>)
     
 </dd>
 </dl>
@@ -18072,12 +19124,12 @@ client.branding().phone().templates().test(
 </dl>
 </details>
 
-## ClientGrants Organizations
-<details><summary><code>client.clientGrants.organizations.list(id) -> SyncPagingIterable&amp;lt;Organization&amp;gt;</code></summary>
+## Connections DirectoryProvisioning
+<details><summary><code>client.connections.directoryProvisioning.list() -> SyncPagingIterable&amp;lt;DirectoryProvisioning&amp;gt;</code></summary>
 <dl>
 <dd>
 
-#### 🔌 Usage
+#### 📝 Description
 
 <dl>
 <dd>
@@ -18085,10 +19137,23 @@ client.branding().phone().templates().test(
 <dl>
 <dd>
 
-```java
-client.clientGrants().organizations().list(
-    "id",
-    ListClientGrantOrganizationsRequestParameters
+Retrieve a list of directory provisioning configurations of a tenant.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.connections().directoryProvisioning().list(
+    ListDirectoryProvisioningsRequestParameters
         .builder()
         .from("from")
         .take(1)
@@ -18108,14 +19173,6 @@ client.clientGrants().organizations().list(
 <dl>
 <dd>
 
-**id:** `String` — ID of the client grant
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
 **from:** `Optional<String>` — Optional Id from which to start selection.
     
 </dd>
@@ -18136,8 +19193,7 @@ client.clientGrants().organizations().list(
 </dl>
 </details>
 
-## Clients Credentials
-<details><summary><code>client.clients.credentials.list(clientId) -> List&amp;lt;ClientCredential&amp;gt;</code></summary>
+<details><summary><code>client.connections.directoryProvisioning.get(id) -> GetDirectoryProvisioningResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -18149,9 +19205,7 @@ client.clientGrants().organizations().list(
 <dl>
 <dd>
 
-Get the details of a client credential.
-
-**Important**: To enable credentials to be used for a client authentication method, set the `client_authentication_methods` property on the client. To enable credentials to be used for JWT-Secured Authorization requests set the `signed_request_object` property on the client.
+Retrieve the directory provisioning configuration of a connection.
 </dd>
 </dl>
 </dd>
@@ -18166,7 +19220,7 @@ Get the details of a client credential.
 <dd>
 
 ```java
-client.clients().credentials().list("client_id");
+client.connections().directoryProvisioning().get("id");
 ```
 </dd>
 </dl>
@@ -18181,7 +19235,7 @@ client.clients().credentials().list("client_id");
 <dl>
 <dd>
 
-**clientId:** `String` — ID of the client.
+**id:** `String` — The id of the connection to retrieve its directory provisioning configuration
     
 </dd>
 </dl>
@@ -18193,7 +19247,7 @@ client.clients().credentials().list("client_id");
 </dl>
 </details>
 
-<details><summary><code>client.clients.credentials.create(clientId, request) -> PostClientCredentialResponseContent</code></summary>
+<details><summary><code>client.connections.directoryProvisioning.create(id, request) -> CreateDirectoryProvisioningResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -18205,63 +19259,7 @@ client.clients().credentials().list("client_id");
 <dl>
 <dd>
 
-Create a client credential associated to your application. Credentials can be used to configure Private Key JWT and mTLS authentication methods, as well as for JWT-secured Authorization requests.
-
-**Public Key**
-
-Public Key credentials can be used to set up Private Key JWT client authentication and JWT-secured Authorization requests.
-
-Sample: 
-
-```json
-{
-  "credential_type": "public_key",
-  "name": "string",
-  "pem": "string",
-  "alg": "RS256",
-  "parse_expiry_from_cert": false,
-  "expires_at": "2022-12-31T23:59:59Z"
-}
-```
-
-**Certificate (CA-signed & self-signed)**
-
-Certificate credentials can be used to set up mTLS client authentication. CA-signed certificates can be configured either with a signed certificate or with just the certificate Subject DN.
-
-CA-signed Certificate Sample (pem): 
-
-```json
-{
-  "credential_type": "x509_cert",
-  "name": "string",
-  "pem": "string"
-}
-```
-
-CA-signed Certificate Sample (subject_dn): 
-
-```json
-{
-  "credential_type": "cert_subject_dn",
-  "name": "string",
-  "subject_dn": "string"
-}
-```
-
-Self-signed Certificate Sample: 
-
-```json
-{
-  "credential_type": "cert_subject_dn",
-  "name": "string",
-  "pem": "string"
-}
-```
-
-The credential will be created but not yet enabled for use until you set the corresponding properties in the client:
-
-- To enable the credential for Private Key JWT or mTLS authentication methods, set the `client_authentication_methods` property on the client. For more information, read [Configure Private Key JWT Authentication](https://auth0.com/docs/get-started/applications/configure-private-key-jwt) and [Configure mTLS Authentication](https://auth0.com/docs/get-started/applications/configure-mtls)
-- To enable the credential for JWT-secured Authorization requests, set the `signed_request_object`property on the client. For more information, read [Configure JWT-secured Authorization Requests (JAR)](https://auth0.com/docs/get-started/applications/configure-jar)
+Create a directory provisioning configuration for a connection.
 </dd>
 </dl>
 </dd>
@@ -18276,12 +19274,13 @@ The credential will be created but not yet enabled for use until you set the cor
 <dd>
 
 ```java
-client.clients().credentials().create(
-    "client_id",
-    PostClientCredentialRequestContent
-        .builder()
-        .credentialType(ClientCredentialTypeEnum.PUBLIC_KEY)
-        .build()
+client.connections().directoryProvisioning().create(
+    "id",
+    OptionalNullable.of(
+        CreateDirectoryProvisioningRequestContent
+            .builder()
+            .build()
+    )
 );
 ```
 </dd>
@@ -18297,7 +19296,7 @@ client.clients().credentials().create(
 <dl>
 <dd>
 
-**clientId:** `String` — ID of the client.
+**id:** `String` — The id of the connection to create its directory provisioning configuration
     
 </dd>
 </dl>
@@ -18305,63 +19304,61 @@ client.clients().credentials().create(
 <dl>
 <dd>
 
-**credentialType:** `ClientCredentialTypeEnum` 
+**request:** `Optional<CreateDirectoryProvisioningRequestContent>` 
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**name:** `Optional<String>` — Friendly name for a credential.
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.connections.directoryProvisioning.delete(id)</code></summary>
 <dl>
 <dd>
 
-**subjectDn:** `Optional<String>` — Subject Distinguished Name. Mutually exclusive with `pem` property. Applies to `cert_subject_dn` credential type.
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**pem:** `Optional<String>` — PEM-formatted public key (SPKI and PKCS1) or X509 certificate. Must be JSON escaped.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**alg:** `Optional<PublicKeyCredentialAlgorithmEnum>` 
-    
+Delete the directory provisioning configuration of a connection.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**parseExpiryFromCert:** `Optional<Boolean>` — Parse expiry from x509 certificate. If true, attempts to parse the expiry date from the provided PEM. Applies to `public_key` credential type.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**expiresAt:** `Optional<OffsetDateTime>` — The ISO 8601 formatted date representing the expiration of the credential. If not specified (not recommended), the credential never expires. Applies to `public_key` credential type.
-    
+```java
+client.connections().directoryProvisioning().delete("id");
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**kid:** `Optional<String>` — Optional kid (Key ID), used to uniquely identify the credential. If not specified, a kid value will be auto-generated. The kid header parameter in JWTs sent by your client should match this value. Valid format is [0-9a-zA-Z-_]{10,64}
+<dl>
+<dd>
+
+**id:** `String` — The id of the connection to delete its directory provisioning configuration
     
 </dd>
 </dl>
@@ -18373,7 +19370,7 @@ client.clients().credentials().create(
 </dl>
 </details>
 
-<details><summary><code>client.clients.credentials.get(clientId, credentialId) -> GetClientCredentialResponseContent</code></summary>
+<details><summary><code>client.connections.directoryProvisioning.update(id, request) -> UpdateDirectoryProvisioningResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -18385,9 +19382,7 @@ client.clients().credentials().create(
 <dl>
 <dd>
 
-Get the details of a client credential.
-
-**Important**: To enable credentials to be used for a client authentication method, set the `client_authentication_methods` property on the client. To enable credentials to be used for JWT-Secured Authorization requests set the `signed_request_object` property on the client.
+Update the directory provisioning configuration of a connection.
 </dd>
 </dl>
 </dd>
@@ -18402,7 +19397,14 @@ Get the details of a client credential.
 <dd>
 
 ```java
-client.clients().credentials().get("client_id", "credential_id");
+client.connections().directoryProvisioning().update(
+    "id",
+    OptionalNullable.of(
+        UpdateDirectoryProvisioningRequestContent
+            .builder()
+            .build()
+    )
+);
 ```
 </dd>
 </dl>
@@ -18417,7 +19419,7 @@ client.clients().credentials().get("client_id", "credential_id");
 <dl>
 <dd>
 
-**clientId:** `String` — ID of the client.
+**id:** `String` — The id of the connection to create its directory provisioning configuration
     
 </dd>
 </dl>
@@ -18425,7 +19427,7 @@ client.clients().credentials().get("client_id", "credential_id");
 <dl>
 <dd>
 
-**credentialId:** `String` — ID of the credential.
+**request:** `Optional<UpdateDirectoryProvisioningRequestContent>` 
     
 </dd>
 </dl>
@@ -18437,7 +19439,7 @@ client.clients().credentials().get("client_id", "credential_id");
 </dl>
 </details>
 
-<details><summary><code>client.clients.credentials.delete(clientId, credentialId)</code></summary>
+<details><summary><code>client.connections.directoryProvisioning.getDefaultMapping(id) -> GetDirectoryProvisioningDefaultMappingResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -18449,7 +19451,7 @@ client.clients().credentials().get("client_id", "credential_id");
 <dl>
 <dd>
 
-Delete a client credential you previously created. May be enabled or disabled. For more information, read <a href="https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow">Client Credential Flow</a>.
+Retrieve the directory provisioning default attribute mapping of a connection.
 </dd>
 </dl>
 </dd>
@@ -18464,7 +19466,7 @@ Delete a client credential you previously created. May be enabled or disabled. F
 <dd>
 
 ```java
-client.clients().credentials().delete("client_id", "credential_id");
+client.connections().directoryProvisioning().getDefaultMapping("id");
 ```
 </dd>
 </dl>
@@ -18479,15 +19481,7 @@ client.clients().credentials().delete("client_id", "credential_id");
 <dl>
 <dd>
 
-**clientId:** `String` — ID of the client.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**credentialId:** `String` — ID of the credential to delete.
+**id:** `String` — The id of the connection to retrieve its directory provisioning configuration
     
 </dd>
 </dl>
@@ -18499,7 +19493,7 @@ client.clients().credentials().delete("client_id", "credential_id");
 </dl>
 </details>
 
-<details><summary><code>client.clients.credentials.update(clientId, credentialId, request) -> PatchClientCredentialResponseContent</code></summary>
+<details><summary><code>client.connections.directoryProvisioning.listSynchronizedGroups(id) -> SyncPagingIterable&amp;lt;SynchronizedGroupPayload&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -18511,7 +19505,7 @@ client.clients().credentials().delete("client_id", "credential_id");
 <dl>
 <dd>
 
-Change a client credential you previously created. May be enabled or disabled. For more information, read <a href="https://www.auth0.com/docs/get-started/authentication-and-authorization-flow/client-credentials-flow">Client Credential Flow</a>.
+Retrieve the configured synchronized groups for a connection directory provisioning configuration.
 </dd>
 </dl>
 </dd>
@@ -18526,11 +19520,13 @@ Change a client credential you previously created. May be enabled or disabled. F
 <dd>
 
 ```java
-client.clients().credentials().update(
-    "client_id",
-    "credential_id",
-    PatchClientCredentialRequestContent
+client.connections().directoryProvisioning().listSynchronizedGroups(
+    "id",
+    ListSynchronizedGroupsRequestParameters
         .builder()
+        .from("from")
+        .take(1)
+        .q("q")
         .build()
 );
 ```
@@ -18547,7 +19543,7 @@ client.clients().credentials().update(
 <dl>
 <dd>
 
-**clientId:** `String` — ID of the client.
+**id:** `String` — The id of the connection to list synchronized groups for.
     
 </dd>
 </dl>
@@ -18555,7 +19551,7 @@ client.clients().credentials().update(
 <dl>
 <dd>
 
-**credentialId:** `String` — ID of the credential.
+**from:** `Optional<String>` — Optional Id from which to start selection.
     
 </dd>
 </dl>
@@ -18563,7 +19559,15 @@ client.clients().credentials().update(
 <dl>
 <dd>
 
-**expiresAt:** `Optional<OffsetDateTime>` — The ISO 8601 formatted date representing the expiration of the credential.
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**q:** `Optional<String>` — Query in <a target='_new' href ='https://lucene.apache.org/core/2_9_4/queryparsersyntax.html'>Lucene query string syntax</a>. Only prefix search on "name" or "email" fields are allowed, with a single wildcard suffix. Operators, modifiers, and groupings are not allowed. Terms are treated as case-insensitive. Example query: "name:engineering*".
     
 </dd>
 </dl>
@@ -18575,8 +19579,7 @@ client.clients().credentials().update(
 </dl>
 </details>
 
-## Clients Connections
-<details><summary><code>client.clients.connections.get(id) -> SyncPagingIterable&amp;lt;ConnectionForList&amp;gt;</code></summary>
+<details><summary><code>client.connections.directoryProvisioning.addSynchronizedGroupSelections(id, request)</code></summary>
 <dl>
 <dd>
 
@@ -18588,10 +19591,7 @@ client.clients().credentials().update(
 <dl>
 <dd>
 
-Retrieve all connections that are enabled for the specified [Application](https://www.auth0.com/docs/get-started/applications), using checkpoint pagination. A list of fields to include or exclude for each connection may also be specified.
-
-- This endpoint requires the `read:connections` scope and any one of `read:clients` or `read:client_summary`.
-- **Note**: The first time you call this endpoint, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no further results are remaining.
+Add synchronized group selections to a directory provisioning configuration.
 </dd>
 </dl>
 </dd>
@@ -18606,16 +19606,17 @@ Retrieve all connections that are enabled for the specified [Application](https:
 <dd>
 
 ```java
-client.clients().connections().get(
+client.connections().directoryProvisioning().addSynchronizedGroupSelections(
     "id",
-    ConnectionsGetRequest
+    AddSynchronizedGroupsRequestContent
         .builder()
-        .from("from")
-        .take(1)
-        .fields("fields")
-        .includeFields(true)
-        .strategy(
-            Arrays.asList(ConnectionStrategyEnum.AD)
+        .groups(
+            Arrays.asList(
+                SynchronizedGroupPayload
+                    .builder()
+                    .id("id")
+                    .build()
+            )
         )
         .build()
 );
@@ -18625,47 +19626,15 @@ client.clients().connections().get(
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**id:** `String` — ID of the client for which to retrieve enabled connections.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**strategy:** `Optional<ConnectionStrategyEnum>` — Provide strategies to only retrieve connections with such strategies
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**from:** `Optional<String>` — Optional Id from which to start selection.
-    
-</dd>
-</dl>
-
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**fields:** `Optional<String>` — A comma separated list of fields to include or exclude (depending on include_fields) from the result, empty to retrieve all fields
+**id:** `String` — The id of the connection to add synchronized groups to
     
 </dd>
 </dl>
@@ -18673,7 +19642,7 @@ client.clients().connections().get(
 <dl>
 <dd>
 
-**includeFields:** `Optional<Boolean>` — <code>true</code> if the fields specified are to be included in the result, <code>false</code> otherwise (defaults to <code>true</code>)
+**groups:** `List<SynchronizedGroupPayload>` — Array of Google Workspace Directory group objects to synchronize.
     
 </dd>
 </dl>
@@ -18685,8 +19654,7 @@ client.clients().connections().get(
 </dl>
 </details>
 
-## Connections DirectoryProvisioning
-<details><summary><code>client.connections.directoryProvisioning.list() -> SyncPagingIterable&amp;lt;DirectoryProvisioning&amp;gt;</code></summary>
+<details><summary><code>client.connections.directoryProvisioning.set(id, request)</code></summary>
 <dl>
 <dd>
 
@@ -18698,7 +19666,7 @@ client.clients().connections().get(
 <dl>
 <dd>
 
-Retrieve a list of directory provisioning configurations of a tenant.
+Create or replace the selected groups for a connection directory provisioning configuration.
 </dd>
 </dl>
 </dd>
@@ -18713,11 +19681,18 @@ Retrieve a list of directory provisioning configurations of a tenant.
 <dd>
 
 ```java
-client.connections().directoryProvisioning().list(
-    ListDirectoryProvisioningsRequestParameters
+client.connections().directoryProvisioning().set(
+    "id",
+    ReplaceSynchronizedGroupsRequestContent
         .builder()
-        .from("from")
-        .take(1)
+        .groups(
+            Arrays.asList(
+                SynchronizedGroupPayload
+                    .builder()
+                    .id("id")
+                    .build()
+            )
+        )
         .build()
 );
 ```
@@ -18734,7 +19709,7 @@ client.connections().directoryProvisioning().list(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Optional Id from which to start selection.
+**id:** `String` — The id of the connection to create or replace synchronized groups for
     
 </dd>
 </dl>
@@ -18742,7 +19717,7 @@ client.connections().directoryProvisioning().list(
 <dl>
 <dd>
 
-**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+**groups:** `List<SynchronizedGroupPayload>` — Array of Google Workspace Directory group objects to synchronize.
     
 </dd>
 </dl>
@@ -18754,7 +19729,7 @@ client.connections().directoryProvisioning().list(
 </dl>
 </details>
 
-<details><summary><code>client.connections.directoryProvisioning.get(id) -> GetDirectoryProvisioningResponseContent</code></summary>
+<details><summary><code>client.connections.directoryProvisioning.deleteSynchronizedGroupSelections(id, request)</code></summary>
 <dl>
 <dd>
 
@@ -18766,7 +19741,7 @@ client.connections().directoryProvisioning().list(
 <dl>
 <dd>
 
-Retrieve the directory provisioning configuration of a connection.
+Delete synchronized group selections for a directory provisioning configuration
 </dd>
 </dl>
 </dd>
@@ -18781,7 +19756,20 @@ Retrieve the directory provisioning configuration of a connection.
 <dd>
 
 ```java
-client.connections().directoryProvisioning().get("id");
+client.connections().directoryProvisioning().deleteSynchronizedGroupSelections(
+    "id",
+    DeleteSynchronizedGroupsRequestContent
+        .builder()
+        .groups(
+            Arrays.asList(
+                SynchronizedGroupSelectionId
+                    .builder()
+                    .id("id")
+                    .build()
+            )
+        )
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -18796,7 +19784,15 @@ client.connections().directoryProvisioning().get("id");
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection to retrieve its directory provisioning configuration
+**id:** `String` — The id of the connection to delete synchronized group selections for
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**groups:** `List<SynchronizedGroupSelectionId>` — Array of groups to remove from the selection set.
     
 </dd>
 </dl>
@@ -18808,7 +19804,8 @@ client.connections().directoryProvisioning().get("id");
 </dl>
 </details>
 
-<details><summary><code>client.connections.directoryProvisioning.create(id, request) -> CreateDirectoryProvisioningResponseContent</code></summary>
+## Connections ScimConfiguration
+<details><summary><code>client.connections.scimConfiguration.list() -> SyncPagingIterable&amp;lt;ScimConfiguration&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -18820,7 +19817,7 @@ client.connections().directoryProvisioning().get("id");
 <dl>
 <dd>
 
-Create a directory provisioning configuration for a connection.
+Retrieve a list of SCIM configurations of a tenant.
 </dd>
 </dl>
 </dd>
@@ -18835,13 +19832,12 @@ Create a directory provisioning configuration for a connection.
 <dd>
 
 ```java
-client.connections().directoryProvisioning().create(
-    "id",
-    OptionalNullable.of(
-        CreateDirectoryProvisioningRequestContent
-            .builder()
-            .build()
-    )
+client.connections().scimConfiguration().list(
+    ListScimConfigurationsRequestParameters
+        .builder()
+        .from("from")
+        .take(1)
+        .build()
 );
 ```
 </dd>
@@ -18857,7 +19853,7 @@ client.connections().directoryProvisioning().create(
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection to create its directory provisioning configuration
+**from:** `Optional<String>` — Optional Id from which to start selection.
     
 </dd>
 </dl>
@@ -18865,7 +19861,7 @@ client.connections().directoryProvisioning().create(
 <dl>
 <dd>
 
-**request:** `Optional<CreateDirectoryProvisioningRequestContent>` 
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
     
 </dd>
 </dl>
@@ -18877,7 +19873,7 @@ client.connections().directoryProvisioning().create(
 </dl>
 </details>
 
-<details><summary><code>client.connections.directoryProvisioning.delete(id)</code></summary>
+<details><summary><code>client.connections.scimConfiguration.get(id) -> GetScimConfigurationResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -18889,7 +19885,7 @@ client.connections().directoryProvisioning().create(
 <dl>
 <dd>
 
-Delete the directory provisioning configuration of a connection.
+Retrieves a scim configuration by its `connectionId`.
 </dd>
 </dl>
 </dd>
@@ -18904,7 +19900,7 @@ Delete the directory provisioning configuration of a connection.
 <dd>
 
 ```java
-client.connections().directoryProvisioning().delete("id");
+client.connections().scimConfiguration().get("id");
 ```
 </dd>
 </dl>
@@ -18919,7 +19915,7 @@ client.connections().directoryProvisioning().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection to delete its directory provisioning configuration
+**id:** `String` — The id of the connection to retrieve its SCIM configuration
     
 </dd>
 </dl>
@@ -18931,7 +19927,7 @@ client.connections().directoryProvisioning().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.connections.directoryProvisioning.update(id, request) -> UpdateDirectoryProvisioningResponseContent</code></summary>
+<details><summary><code>client.connections.scimConfiguration.create(id, request) -> CreateScimConfigurationResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -18943,7 +19939,7 @@ client.connections().directoryProvisioning().delete("id");
 <dl>
 <dd>
 
-Update the directory provisioning configuration of a connection.
+Create a scim configuration for a connection.
 </dd>
 </dl>
 </dd>
@@ -18958,10 +19954,10 @@ Update the directory provisioning configuration of a connection.
 <dd>
 
 ```java
-client.connections().directoryProvisioning().update(
+client.connections().scimConfiguration().create(
     "id",
     OptionalNullable.of(
-        UpdateDirectoryProvisioningRequestContent
+        CreateScimConfigurationRequestContent
             .builder()
             .build()
     )
@@ -18980,7 +19976,7 @@ client.connections().directoryProvisioning().update(
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection to create its directory provisioning configuration
+**id:** `String` — The id of the connection to create its SCIM configuration
     
 </dd>
 </dl>
@@ -18988,7 +19984,7 @@ client.connections().directoryProvisioning().update(
 <dl>
 <dd>
 
-**request:** `Optional<UpdateDirectoryProvisioningRequestContent>` 
+**request:** `Optional<CreateScimConfigurationRequestContent>` 
     
 </dd>
 </dl>
@@ -19000,7 +19996,7 @@ client.connections().directoryProvisioning().update(
 </dl>
 </details>
 
-<details><summary><code>client.connections.directoryProvisioning.getDefaultMapping(id) -> GetDirectoryProvisioningDefaultMappingResponseContent</code></summary>
+<details><summary><code>client.connections.scimConfiguration.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -19012,7 +20008,7 @@ client.connections().directoryProvisioning().update(
 <dl>
 <dd>
 
-Retrieve the directory provisioning default attribute mapping of a connection.
+Deletes a scim configuration by its `connectionId`.
 </dd>
 </dl>
 </dd>
@@ -19027,7 +20023,7 @@ Retrieve the directory provisioning default attribute mapping of a connection.
 <dd>
 
 ```java
-client.connections().directoryProvisioning().getDefaultMapping("id");
+client.connections().scimConfiguration().delete("id");
 ```
 </dd>
 </dl>
@@ -19042,7 +20038,7 @@ client.connections().directoryProvisioning().getDefaultMapping("id");
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection to retrieve its directory provisioning configuration
+**id:** `String` — The id of the connection to delete its SCIM configuration
     
 </dd>
 </dl>
@@ -19054,7 +20050,7 @@ client.connections().directoryProvisioning().getDefaultMapping("id");
 </dl>
 </details>
 
-<details><summary><code>client.connections.directoryProvisioning.listSynchronizedGroups(id) -> SyncPagingIterable&amp;lt;SynchronizedGroupPayload&amp;gt;</code></summary>
+<details><summary><code>client.connections.scimConfiguration.update(id, request) -> UpdateScimConfigurationResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -19066,7 +20062,7 @@ client.connections().directoryProvisioning().getDefaultMapping("id");
 <dl>
 <dd>
 
-Retrieve the configured synchronized groups for a connection directory provisioning configuration.
+Update a scim configuration by its `connectionId`.
 </dd>
 </dl>
 </dd>
@@ -19081,12 +20077,18 @@ Retrieve the configured synchronized groups for a connection directory provision
 <dd>
 
 ```java
-client.connections().directoryProvisioning().listSynchronizedGroups(
+client.connections().scimConfiguration().update(
     "id",
-    ListSynchronizedGroupsRequestParameters
+    UpdateScimConfigurationRequestContent
         .builder()
-        .from("from")
-        .take(1)
+        .userIdAttribute("user_id_attribute")
+        .mapping(
+            Arrays.asList(
+                ScimMappingItem
+                    .builder()
+                    .build()
+            )
+        )
         .build()
 );
 ```
@@ -19103,7 +20105,7 @@ client.connections().directoryProvisioning().listSynchronizedGroups(
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection to list synchronized groups for.
+**id:** `String` — The id of the connection to update its SCIM configuration
     
 </dd>
 </dl>
@@ -19111,7 +20113,7 @@ client.connections().directoryProvisioning().listSynchronizedGroups(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Optional Id from which to start selection.
+**userIdAttribute:** `String` — User ID attribute for generating unique user ids
     
 </dd>
 </dl>
@@ -19119,7 +20121,7 @@ client.connections().directoryProvisioning().listSynchronizedGroups(
 <dl>
 <dd>
 
-**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+**mapping:** `List<ScimMappingItem>` — The mapping between auth0 and SCIM
     
 </dd>
 </dl>
@@ -19131,7 +20133,7 @@ client.connections().directoryProvisioning().listSynchronizedGroups(
 </dl>
 </details>
 
-<details><summary><code>client.connections.directoryProvisioning.set(id, request)</code></summary>
+<details><summary><code>client.connections.scimConfiguration.getDefaultMapping(id) -> GetScimConfigurationDefaultMappingResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -19143,7 +20145,7 @@ client.connections().directoryProvisioning().listSynchronizedGroups(
 <dl>
 <dd>
 
-Create or replace the selected groups for a connection directory provisioning configuration.
+Retrieves a scim configuration's default mapping by its `connectionId`.
 </dd>
 </dl>
 </dd>
@@ -19158,20 +20160,7 @@ Create or replace the selected groups for a connection directory provisioning co
 <dd>
 
 ```java
-client.connections().directoryProvisioning().set(
-    "id",
-    ReplaceSynchronizedGroupsRequestContent
-        .builder()
-        .groups(
-            Arrays.asList(
-                SynchronizedGroupPayload
-                    .builder()
-                    .id("id")
-                    .build()
-            )
-        )
-        .build()
-);
+client.connections().scimConfiguration().getDefaultMapping("id");
 ```
 </dd>
 </dl>
@@ -19186,15 +20175,7 @@ client.connections().directoryProvisioning().set(
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection to create or replace synchronized groups for
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**groups:** `List<SynchronizedGroupPayload>` — Array of Google Workspace Directory group objects to synchronize.
+**id:** `String` — The id of the connection to retrieve its default SCIM mapping
     
 </dd>
 </dl>
@@ -19206,8 +20187,8 @@ client.connections().directoryProvisioning().set(
 </dl>
 </details>
 
-## Connections ScimConfiguration
-<details><summary><code>client.connections.scimConfiguration.list() -> SyncPagingIterable&amp;lt;ScimConfiguration&amp;gt;</code></summary>
+## Connections Clients
+<details><summary><code>client.connections.clients.get(id) -> SyncPagingIterable&amp;lt;ConnectionEnabledClient&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -19219,7 +20200,9 @@ client.connections().directoryProvisioning().set(
 <dl>
 <dd>
 
-Retrieve a list of SCIM configurations of a tenant.
+Retrieve all clients that have the specified [connection](https://auth0.com/docs/authenticate/identity-providers) enabled.
+
+**Note**: The first time you call this endpoint, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no further results are remaining.
 </dd>
 </dl>
 </dd>
@@ -19234,11 +20217,12 @@ Retrieve a list of SCIM configurations of a tenant.
 <dd>
 
 ```java
-client.connections().scimConfiguration().list(
-    ListScimConfigurationsRequestParameters
+client.connections().clients().get(
+    "id",
+    GetConnectionEnabledClientsRequestParameters
         .builder()
-        .from("from")
         .take(1)
+        .from("from")
         .build()
 );
 ```
@@ -19255,7 +20239,7 @@ client.connections().scimConfiguration().list(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Optional Id from which to start selection.
+**id:** `String` — The id of the connection for which enabled clients are to be retrieved
     
 </dd>
 </dl>
@@ -19265,6 +20249,14 @@ client.connections().scimConfiguration().list(
 
 **take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
     
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**from:** `Optional<String>` — Optional Id from which to start selection.
+    
 </dd>
 </dl>
 </dd>
@@ -19275,7 +20267,65 @@ client.connections().scimConfiguration().list(
 </dl>
 </details>
 
-<details><summary><code>client.connections.scimConfiguration.get(id) -> GetScimConfigurationResponseContent</code></summary>
+<details><summary><code>client.connections.clients.update(id, request)</code></summary>
+<dl>
+<dd>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.connections().clients().update(
+    "id",
+    Arrays.asList(
+        UpdateEnabledClientConnectionsRequestContentItem
+            .builder()
+            .clientId("client_id")
+            .status(true)
+            .build()
+    )
+);
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` — The id of the connection to modify
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**request:** `List<UpdateEnabledClientConnectionsRequestContentItem>` 
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
+
+## Connections Keys
+<details><summary><code>client.connections.keys.get(id) -> List&amp;lt;ConnectionKey&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -19287,7 +20337,7 @@ client.connections().scimConfiguration().list(
 <dl>
 <dd>
 
-Retrieves a scim configuration by its `connectionId`.
+Gets the connection keys for the Okta or OIDC connection strategy.
 </dd>
 </dl>
 </dd>
@@ -19302,7 +20352,7 @@ Retrieves a scim configuration by its `connectionId`.
 <dd>
 
 ```java
-client.connections().scimConfiguration().get("id");
+client.connections().keys().get("id");
 ```
 </dd>
 </dl>
@@ -19317,7 +20367,7 @@ client.connections().scimConfiguration().get("id");
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection to retrieve its SCIM configuration
+**id:** `String` — ID of the connection
     
 </dd>
 </dl>
@@ -19329,7 +20379,7 @@ client.connections().scimConfiguration().get("id");
 </dl>
 </details>
 
-<details><summary><code>client.connections.scimConfiguration.create(id, request) -> CreateScimConfigurationResponseContent</code></summary>
+<details><summary><code>client.connections.keys.create(id, request) -> List&amp;lt;PostConnectionsKeysResponseContentItem&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -19341,7 +20391,7 @@ client.connections().scimConfiguration().get("id");
 <dl>
 <dd>
 
-Create a scim configuration for a connection.
+Provision initial connection keys for Okta or OIDC connection strategies. This endpoint allows you to create keys before configuring the connection to use Private Key JWT authentication, enabling zero-downtime transitions.
 </dd>
 </dl>
 </dd>
@@ -19356,10 +20406,10 @@ Create a scim configuration for a connection.
 <dd>
 
 ```java
-client.connections().scimConfiguration().create(
+client.connections().keys().create(
     "id",
     OptionalNullable.of(
-        CreateScimConfigurationRequestContent
+        PostConnectionKeysRequestContent
             .builder()
             .build()
     )
@@ -19378,7 +20428,7 @@ client.connections().scimConfiguration().create(
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection to create its SCIM configuration
+**id:** `String` — ID of the connection
     
 </dd>
 </dl>
@@ -19386,7 +20436,7 @@ client.connections().scimConfiguration().create(
 <dl>
 <dd>
 
-**request:** `Optional<CreateScimConfigurationRequestContent>` 
+**request:** `Optional<PostConnectionKeysRequestContent>` 
     
 </dd>
 </dl>
@@ -19398,7 +20448,7 @@ client.connections().scimConfiguration().create(
 </dl>
 </details>
 
-<details><summary><code>client.connections.scimConfiguration.delete(id)</code></summary>
+<details><summary><code>client.connections.keys.rotate(id, request) -> RotateConnectionsKeysResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -19410,7 +20460,7 @@ client.connections().scimConfiguration().create(
 <dl>
 <dd>
 
-Deletes a scim configuration by its `connectionId`.
+Rotates the connection keys for the Okta or OIDC connection strategies.
 </dd>
 </dl>
 </dd>
@@ -19425,7 +20475,14 @@ Deletes a scim configuration by its `connectionId`.
 <dd>
 
 ```java
-client.connections().scimConfiguration().delete("id");
+client.connections().keys().rotate(
+    "id",
+    OptionalNullable.of(
+        RotateConnectionKeysRequestContent
+            .builder()
+            .build()
+    )
+);
 ```
 </dd>
 </dl>
@@ -19440,7 +20497,15 @@ client.connections().scimConfiguration().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection to delete its SCIM configuration
+**id:** `String` — ID of the connection
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**request:** `Optional<RotateConnectionKeysRequestContent>` 
     
 </dd>
 </dl>
@@ -19452,7 +20517,8 @@ client.connections().scimConfiguration().delete("id");
 </dl>
 </details>
 
-<details><summary><code>client.connections.scimConfiguration.update(id, request) -> UpdateScimConfigurationResponseContent</code></summary>
+## Connections Users
+<details><summary><code>client.connections.users.deleteByEmail(id)</code></summary>
 <dl>
 <dd>
 
@@ -19464,7 +20530,7 @@ client.connections().scimConfiguration().delete("id");
 <dl>
 <dd>
 
-Update a scim configuration by its `connectionId`.
+Deletes a specified connection user by its email (you cannot delete all users from specific connection). Currently, only Database Connections are supported.
 </dd>
 </dl>
 </dd>
@@ -19479,18 +20545,11 @@ Update a scim configuration by its `connectionId`.
 <dd>
 
 ```java
-client.connections().scimConfiguration().update(
+client.connections().users().deleteByEmail(
     "id",
-    UpdateScimConfigurationRequestContent
+    DeleteConnectionUsersByEmailQueryParameters
         .builder()
-        .userIdAttribute("user_id_attribute")
-        .mapping(
-            Arrays.asList(
-                ScimMappingItem
-                    .builder()
-                    .build()
-            )
-        )
+        .email("email")
         .build()
 );
 ```
@@ -19507,15 +20566,7 @@ client.connections().scimConfiguration().update(
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection to update its SCIM configuration
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**userIdAttribute:** `String` — User ID attribute for generating unique user ids
+**id:** `String` — The id of the connection (currently only database connections are supported)
     
 </dd>
 </dl>
@@ -19523,7 +20574,7 @@ client.connections().scimConfiguration().update(
 <dl>
 <dd>
 
-**mapping:** `List<ScimMappingItem>` — The mapping between auth0 and SCIM
+**email:** `String` — The email of the user to delete
     
 </dd>
 </dl>
@@ -19535,7 +20586,8 @@ client.connections().scimConfiguration().update(
 </dl>
 </details>
 
-<details><summary><code>client.connections.scimConfiguration.getDefaultMapping(id) -> GetScimConfigurationDefaultMappingResponseContent</code></summary>
+## Connections DirectoryProvisioning Synchronizations
+<details><summary><code>client.connections.directoryProvisioning.synchronizations.create(id) -> CreateDirectorySynchronizationResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -19547,7 +20599,7 @@ client.connections().scimConfiguration().update(
 <dl>
 <dd>
 
-Retrieves a scim configuration's default mapping by its `connectionId`.
+Request an on-demand synchronization of the directory.
 </dd>
 </dl>
 </dd>
@@ -19562,7 +20614,7 @@ Retrieves a scim configuration's default mapping by its `connectionId`.
 <dd>
 
 ```java
-client.connections().scimConfiguration().getDefaultMapping("id");
+client.connections().directoryProvisioning().synchronizations().create("id");
 ```
 </dd>
 </dl>
@@ -19577,7 +20629,7 @@ client.connections().scimConfiguration().getDefaultMapping("id");
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection to retrieve its default SCIM mapping
+**id:** `String` — The id of the connection to trigger synchronization for
     
 </dd>
 </dl>
@@ -19589,8 +20641,8 @@ client.connections().scimConfiguration().getDefaultMapping("id");
 </dl>
 </details>
 
-## Connections Clients
-<details><summary><code>client.connections.clients.get(id) -> SyncPagingIterable&amp;lt;ConnectionEnabledClient&amp;gt;</code></summary>
+## Connections ScimConfiguration Tokens
+<details><summary><code>client.connections.scimConfiguration.tokens.get(id) -> List&amp;lt;ScimTokenItem&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -19602,9 +20654,7 @@ client.connections().scimConfiguration().getDefaultMapping("id");
 <dl>
 <dd>
 
-Retrieve all clients that have the specified [connection](https://auth0.com/docs/authenticate/identity-providers) enabled.
-
-**Note**: The first time you call this endpoint, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no further results are remaining.
+Retrieves all scim tokens by its connection `id`.
 </dd>
 </dl>
 </dd>
@@ -19619,14 +20669,7 @@ Retrieve all clients that have the specified [connection](https://auth0.com/docs
 <dd>
 
 ```java
-client.connections().clients().get(
-    "id",
-    GetConnectionEnabledClientsRequestParameters
-        .builder()
-        .take(1)
-        .from("from")
-        .build()
-);
+client.connections().scimConfiguration().tokens().get("id");
 ```
 </dd>
 </dl>
@@ -19641,23 +20684,7 @@ client.connections().clients().get(
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection for which enabled clients are to be retrieved
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**from:** `Optional<String>` — Optional Id from which to start selection.
+**id:** `String` — The id of the connection to retrieve its SCIM configuration
     
 </dd>
 </dl>
@@ -19669,11 +20696,11 @@ client.connections().clients().get(
 </dl>
 </details>
 
-<details><summary><code>client.connections.clients.update(id, request)</code></summary>
+<details><summary><code>client.connections.scimConfiguration.tokens.create(id, request) -> CreateScimTokenResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 🔌 Usage
+#### 📝 Description
 
 <dl>
 <dd>
@@ -19681,57 +20708,34 @@ client.connections().clients().get(
 <dl>
 <dd>
 
-```java
-client.connections().clients().update(
-    "id",
-    Arrays.asList(
-        UpdateEnabledClientConnectionsRequestContentItem
-            .builder()
-            .clientId("client_id")
-            .status(true)
-            .build()
-    )
-);
-```
+Create a scim token for a scim client.
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
+#### 🔌 Usage
 
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection to modify
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**request:** `List<UpdateEnabledClientConnectionsRequestContentItem>` 
-    
-</dd>
-</dl>
+```java
+client.connections().scimConfiguration().tokens().create(
+    "id",
+    CreateScimTokenRequestContent
+        .builder()
+        .build()
+);
+```
 </dd>
 </dl>
-
-
 </dd>
 </dl>
-</details>
-
-## Connections Keys
-<details><summary><code>client.connections.keys.get(id) -> List&amp;lt;ConnectionKey&amp;gt;</code></summary>
-<dl>
-<dd>
 
-#### 📝 Description
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -19739,37 +20743,23 @@ client.connections().clients().update(
 <dl>
 <dd>
 
-Gets the connection keys for the Okta or OIDC connection strategy.
-</dd>
-</dl>
+**id:** `String` — The id of the connection to create its SCIM token
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-```java
-client.connections().keys().get("id");
-```
-</dd>
-</dl>
+**scopes:** `Optional<List<String>>` — The scopes of the scim token
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-**id:** `String` — ID of the connection
+**tokenLifetime:** `Optional<Integer>` — Lifetime of the token in seconds. Must be greater than 900
     
 </dd>
 </dl>
@@ -19781,7 +20771,7 @@ client.connections().keys().get("id");
 </dl>
 </details>
 
-<details><summary><code>client.connections.keys.create(id, request) -> List&amp;lt;PostConnectionsKeysResponseContentItem&amp;gt;</code></summary>
+<details><summary><code>client.connections.scimConfiguration.tokens.delete(id, tokenId)</code></summary>
 <dl>
 <dd>
 
@@ -19793,7 +20783,7 @@ client.connections().keys().get("id");
 <dl>
 <dd>
 
-Provision initial connection keys for Okta or OIDC connection strategies. This endpoint allows you to create keys before configuring the connection to use Private Key JWT authentication, enabling zero-downtime transitions.
+Deletes a scim token by its connection `id` and `tokenId`.
 </dd>
 </dl>
 </dd>
@@ -19808,14 +20798,7 @@ Provision initial connection keys for Okta or OIDC connection strategies. This e
 <dd>
 
 ```java
-client.connections().keys().create(
-    "id",
-    OptionalNullable.of(
-        PostConnectionKeysRequestContent
-            .builder()
-            .build()
-    )
-);
+client.connections().scimConfiguration().tokens().delete("id", "tokenId");
 ```
 </dd>
 </dl>
@@ -19830,7 +20813,7 @@ client.connections().keys().create(
 <dl>
 <dd>
 
-**id:** `String` — ID of the connection
+**id:** `String` — The connection id that owns the SCIM token to delete
     
 </dd>
 </dl>
@@ -19838,7 +20821,7 @@ client.connections().keys().create(
 <dl>
 <dd>
 
-**request:** `Optional<PostConnectionKeysRequestContent>` 
+**tokenId:** `String` — The id of the scim token to delete
     
 </dd>
 </dl>
@@ -19850,7 +20833,8 @@ client.connections().keys().create(
 </dl>
 </details>
 
-<details><summary><code>client.connections.keys.rotate(id, request) -> RotateConnectionsKeysResponseContent</code></summary>
+## Emails Provider
+<details><summary><code>client.emails.provider.get() -> GetEmailProviderResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -19862,7 +20846,7 @@ client.connections().keys().create(
 <dl>
 <dd>
 
-Rotates the connection keys for the Okta or OIDC connection strategies.
+Retrieve details of the [email provider configuration](https://auth0.com/docs/customize/email/smtp-email-providers) in your tenant. A list of fields to include or exclude may also be specified.
 </dd>
 </dl>
 </dd>
@@ -19877,13 +20861,12 @@ Rotates the connection keys for the Okta or OIDC connection strategies.
 <dd>
 
 ```java
-client.connections().keys().rotate(
-    "id",
-    OptionalNullable.of(
-        RotateConnectionKeysRequestContent
-            .builder()
-            .build()
-    )
+client.emails().provider().get(
+    GetEmailProviderRequestParameters
+        .builder()
+        .fields("fields")
+        .includeFields(true)
+        .build()
 );
 ```
 </dd>
@@ -19899,7 +20882,7 @@ client.connections().keys().rotate(
 <dl>
 <dd>
 
-**id:** `String` — ID of the connection
+**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (dependent upon include_fields) from the result. Leave empty to retrieve `name` and `enabled`. Additional fields available include `credentials`, `default_from_address`, and `settings`.
     
 </dd>
 </dl>
@@ -19907,7 +20890,7 @@ client.connections().keys().rotate(
 <dl>
 <dd>
 
-**request:** `Optional<RotateConnectionKeysRequestContent>` 
+**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
     
 </dd>
 </dl>
@@ -19919,8 +20902,7 @@ client.connections().keys().rotate(
 </dl>
 </details>
 
-## Connections Users
-<details><summary><code>client.connections.users.deleteByEmail(id)</code></summary>
+<details><summary><code>client.emails.provider.create(request) -> CreateEmailProviderResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -19932,7 +20914,31 @@ client.connections().keys().rotate(
 <dl>
 <dd>
 
-Deletes a specified connection user by its email (you cannot delete all users from specific connection). Currently, only Database Connections are supported.
+Create an [email provider](https://auth0.com/docs/email/providers). The `credentials` object
+requires different properties depending on the email provider (which is specified using the `name` property):
+
+- `mandrill` requires `api_key`
+- `sendgrid` requires `api_key`
+- `sparkpost` requires `api_key`. Optionally, set `region` to `eu` to use
+    the SparkPost service hosted in Western Europe; set to `null` to use the SparkPost service hosted in
+    North America. `eu` or `null` are the only valid values for `region`.
+- `mailgun` requires `api_key` and `domain`. Optionally, set `region` to
+    `eu` to use the Mailgun service hosted in Europe; set to `null` otherwise. `eu` or
+    `null` are the only valid values for `region`.
+- `ses` requires `accessKeyId`, `secretAccessKey`, and `region`
+- `smtp` requires `smtp_host`, `smtp_port`, `smtp_user`, and
+    `smtp_pass`
+
+Depending on the type of provider it is possible to specify `settings` object with different configuration
+options, which will be used when sending an email:
+
+- `smtp` provider, `settings` may contain `headers` object.
+    - When using AWS SES SMTP host, you may provide a name of configuration set in
+      `X-SES-Configuration-Set` header. Value must be a string.
+    - When using Sparkpost host, you may provide value for
+      `X-MSYS_API` header. Value must be an object.
+- For `ses` provider, `settings` may contain `message` object, where you can provide
+  a name of configuration set in `configuration_set_name` property. Value must be a string.
 </dd>
 </dl>
 </dd>
@@ -19947,11 +20953,18 @@ Deletes a specified connection user by its email (you cannot delete all users fr
 <dd>
 
 ```java
-client.connections().users().deleteByEmail(
-    "id",
-    DeleteConnectionUsersByEmailQueryParameters
+client.emails().provider().create(
+    CreateEmailProviderRequestContent
         .builder()
-        .email("email")
+        .name(EmailProviderNameEnum.MAILGUN)
+        .credentials(
+            EmailProviderCredentialsSchema.of(
+                EmailProviderCredentialsSchemaZero
+                    .builder()
+                    .apiKey("api_key")
+                    .build()
+            )
+        )
         .build()
 );
 ```
@@ -19968,7 +20981,7 @@ client.connections().users().deleteByEmail(
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection (currently only database connections are supported)
+**name:** `EmailProviderNameEnum` 
     
 </dd>
 </dl>
@@ -19976,62 +20989,31 @@ client.connections().users().deleteByEmail(
 <dl>
 <dd>
 
-**email:** `String` — The email of the user to delete
+**enabled:** `Optional<Boolean>` — Whether the provider is enabled (true) or disabled (false).
     
 </dd>
 </dl>
-</dd>
-</dl>
-
-
-</dd>
-</dl>
-</details>
-
-## Connections DirectoryProvisioning Synchronizations
-<details><summary><code>client.connections.directoryProvisioning.synchronizations.create(id) -> CreateDirectorySynchronizationResponseContent</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
 
 <dl>
 <dd>
 
-Request an on-demand synchronization of the directory.
-</dd>
-</dl>
+**defaultFromAddress:** `Optional<String>` — Email address to use as "from" when no other address specified.
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-```java
-client.connections().directoryProvisioning().synchronizations().create("id");
-```
-</dd>
-</dl>
+**credentials:** `EmailProviderCredentialsSchema` 
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection to trigger synchronization for
+**settings:** `Optional<Map<String, Object>>` 
     
 </dd>
 </dl>
@@ -20043,8 +21025,7 @@ client.connections().directoryProvisioning().synchronizations().create("id");
 </dl>
 </details>
 
-## Connections ScimConfiguration Tokens
-<details><summary><code>client.connections.scimConfiguration.tokens.get(id) -> List&amp;lt;ScimTokenItem&amp;gt;</code></summary>
+<details><summary><code>client.emails.provider.delete()</code></summary>
 <dl>
 <dd>
 
@@ -20056,7 +21037,7 @@ client.connections().directoryProvisioning().synchronizations().create("id");
 <dl>
 <dd>
 
-Retrieves all scim tokens by its connection `id`.
+Delete the email provider.
 </dd>
 </dl>
 </dd>
@@ -20071,34 +21052,19 @@ Retrieves all scim tokens by its connection `id`.
 <dd>
 
 ```java
-client.connections().scimConfiguration().tokens().get("id");
+client.emails().provider().delete();
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**id:** `String` — The id of the connection to retrieve its SCIM configuration
-    
-</dd>
-</dl>
-</dd>
-</dl>
-
 
 </dd>
 </dl>
 </details>
 
-<details><summary><code>client.connections.scimConfiguration.tokens.create(id, request) -> CreateScimTokenResponseContent</code></summary>
+<details><summary><code>client.emails.provider.update(request) -> UpdateEmailProviderResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -20110,7 +21076,32 @@ client.connections().scimConfiguration().tokens().get("id");
 <dl>
 <dd>
 
-Create a scim token for a scim client.
+Update an [email provider](https://auth0.com/docs/email/providers). The `credentials` object
+requires different properties depending on the email provider (which is specified using the `name` property):
+
+- `mandrill` requires `api_key`
+- `sendgrid` requires `api_key`
+- `sparkpost` requires `api_key`. Optionally, set `region` to `eu` to use
+    the SparkPost service hosted in Western Europe; set to `null` to use the SparkPost service hosted in
+    North America. `eu` or `null` are the only valid values for `region`.
+- `mailgun` requires `api_key` and `domain`. Optionally, set `region` to
+    `eu` to use the Mailgun service hosted in Europe; set to `null` otherwise. `eu` or
+    `null` are the only valid values for `region`.
+- `ses` requires `accessKeyId`, `secretAccessKey`, and `region`
+- `smtp` requires `smtp_host`, `smtp_port`, `smtp_user`, and
+    `smtp_pass`
+
+Depending on the type of provider it is possible to specify `settings` object with different configuration
+options, which will be used when sending an email:
+
+- `smtp` provider, `settings` may contain `headers` object.
+    - When using AWS SES SMTP host, you may provide a name of configuration set in
+      `X-SES-Configuration-Set` header. Value must be a string.
+    - When using Sparkpost host, you may provide value for
+      `X-MSYS_API` header. Value must be an object.
+
+  For `ses` provider, `settings` may contain `message` object, where you can provide
+  a name of configuration set in `configuration_set_name` property. Value must be a string.
 </dd>
 </dl>
 </dd>
@@ -20125,9 +21116,8 @@ Create a scim token for a scim client.
 <dd>
 
 ```java
-client.connections().scimConfiguration().tokens().create(
-    "id",
-    CreateScimTokenRequestContent
+client.emails().provider().update(
+    UpdateEmailProviderRequestContent
         .builder()
         .build()
 );
@@ -20145,7 +21135,7 @@ client.connections().scimConfiguration().tokens().create(
 <dl>
 <dd>
 
-**id:** `String` — The id of the connection to create its SCIM token
+**name:** `Optional<EmailProviderNameEnum>` 
     
 </dd>
 </dl>
@@ -20153,7 +21143,7 @@ client.connections().scimConfiguration().tokens().create(
 <dl>
 <dd>
 
-**scopes:** `Optional<List<String>>` — The scopes of the scim token
+**enabled:** `Optional<Boolean>` — Whether the provider is enabled (true) or disabled (false).
     
 </dd>
 </dl>
@@ -20161,35 +21151,38 @@ client.connections().scimConfiguration().tokens().create(
 <dl>
 <dd>
 
-**tokenLifetime:** `Optional<Integer>` — Lifetime of the token in seconds. Must be greater than 900
+**defaultFromAddress:** `Optional<String>` — Email address to use as "from" when no other address specified.
     
 </dd>
 </dl>
-</dd>
-</dl>
 
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.connections.scimConfiguration.tokens.delete(id, tokenId)</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
-
-<dl>
-<dd>
+**credentials:** `Optional<EmailProviderCredentialsSchema>` 
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
-Deletes a scim token by its connection `id` and `tokenId`.
+**settings:** `Optional<Map<String, Object>>` 
+    
+</dd>
+</dl>
 </dd>
 </dl>
+
+
 </dd>
 </dl>
+</details>
+
+## EventStreams Deliveries
+<details><summary><code>client.eventStreams.deliveries.list(id) -> SyncPagingIterable&amp;lt;EventStreamDelivery&amp;gt;</code></summary>
+<dl>
+<dd>
 
 #### 🔌 Usage
 
@@ -20200,7 +21193,18 @@ Deletes a scim token by its connection `id` and `tokenId`.
 <dd>
 
 ```java
-client.connections().scimConfiguration().tokens().delete("id", "tokenId");
+client.eventStreams().deliveries().list(
+    "id",
+    ListEventStreamDeliveriesRequestParameters
+        .builder()
+        .statuses("statuses")
+        .eventTypes("event_types")
+        .dateFrom("date_from")
+        .dateTo("date_to")
+        .from("from")
+        .take(1)
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -20215,7 +21219,7 @@ client.connections().scimConfiguration().tokens().delete("id", "tokenId");
 <dl>
 <dd>
 
-**id:** `String` — The connection id that owns the SCIM token to delete
+**id:** `String` — Unique identifier for the event stream.
     
 </dd>
 </dl>
@@ -20223,36 +21227,61 @@ client.connections().scimConfiguration().tokens().delete("id", "tokenId");
 <dl>
 <dd>
 
-**tokenId:** `String` — The id of the scim token to delete
+**statuses:** `Optional<String>` — Comma-separated list of statuses by which to filter
     
 </dd>
 </dl>
+
+<dl>
+<dd>
+
+**eventTypes:** `Optional<String>` — Comma-separated list of event types by which to filter
+    
 </dd>
 </dl>
 
+<dl>
+<dd>
 
+**dateFrom:** `Optional<String>` — An RFC-3339 date-time for redelivery start, inclusive. Does not allow sub-second precision.
+    
 </dd>
 </dl>
-</details>
 
-## Emails Provider
-<details><summary><code>client.emails.provider.get() -> GetEmailProviderResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+**dateTo:** `Optional<String>` — An RFC-3339 date-time for redelivery end, exclusive. Does not allow sub-second precision.
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**from:** `Optional<String>` — Optional Id from which to start selection.
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-Retrieve details of the [email provider configuration](https://auth0.com/docs/customize/email/smtp-email-providers) in your tenant. A list of fields to include or exclude may also be specified.
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+    
+</dd>
+</dl>
 </dd>
 </dl>
+
+
 </dd>
 </dl>
+</details>
+
+<details><summary><code>client.eventStreams.deliveries.getHistory(id, eventId) -> GetEventStreamDeliveryHistoryResponseContent</code></summary>
+<dl>
+<dd>
 
 #### 🔌 Usage
 
@@ -20263,13 +21292,7 @@ Retrieve details of the [email provider configuration](https://auth0.com/docs/cu
 <dd>
 
 ```java
-client.emails().provider().get(
-    GetEmailProviderRequestParameters
-        .builder()
-        .fields("fields")
-        .includeFields(true)
-        .build()
-);
+client.eventStreams().deliveries().getHistory("id", "event_id");
 ```
 </dd>
 </dl>
@@ -20284,7 +21307,7 @@ client.emails().provider().get(
 <dl>
 <dd>
 
-**fields:** `Optional<String>` — Comma-separated list of fields to include or exclude (dependent upon include_fields) from the result. Leave empty to retrieve `name` and `enabled`. Additional fields available include `credentials`, `default_from_address`, and `settings`.
+**id:** `String` — Unique identifier for the event stream.
     
 </dd>
 </dl>
@@ -20292,7 +21315,7 @@ client.emails().provider().get(
 <dl>
 <dd>
 
-**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
+**eventId:** `String` — Unique identifier for the event
     
 </dd>
 </dl>
@@ -20304,48 +21327,11 @@ client.emails().provider().get(
 </dl>
 </details>
 
-<details><summary><code>client.emails.provider.create(request) -> CreateEmailProviderResponseContent</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
+## EventStreams Redeliveries
+<details><summary><code>client.eventStreams.redeliveries.create(id, request) -> CreateEventStreamRedeliveryResponseContent</code></summary>
 <dl>
 <dd>
 
-Create an [email provider](https://auth0.com/docs/email/providers). The `credentials` object
-requires different properties depending on the email provider (which is specified using the `name` property):
-
-- `mandrill` requires `api_key`
-- `sendgrid` requires `api_key`
-- `sparkpost` requires `api_key`. Optionally, set `region` to `eu` to use
-    the SparkPost service hosted in Western Europe; set to `null` to use the SparkPost service hosted in
-    North America. `eu` or `null` are the only valid values for `region`.
-- `mailgun` requires `api_key` and `domain`. Optionally, set `region` to
-    `eu` to use the Mailgun service hosted in Europe; set to `null` otherwise. `eu` or
-    `null` are the only valid values for `region`.
-- `ses` requires `accessKeyId`, `secretAccessKey`, and `region`
-- `smtp` requires `smtp_host`, `smtp_port`, `smtp_user`, and
-    `smtp_pass`
-
-Depending on the type of provider it is possible to specify `settings` object with different configuration
-options, which will be used when sending an email:
-
-- `smtp` provider, `settings` may contain `headers` object.
-    - When using AWS SES SMTP host, you may provide a name of configuration set in
-      `X-SES-Configuration-Set` header. Value must be a string.
-    - When using Sparkpost host, you may provide value for
-      `X-MSYS_API` header. Value must be an object.
-- For `ses` provider, `settings` may contain `message` object, where you can provide
-  a name of configuration set in `configuration_set_name` property. Value must be a string.
-</dd>
-</dl>
-</dd>
-</dl>
-
 #### 🔌 Usage
 
 <dl>
@@ -20354,19 +21340,11 @@ options, which will be used when sending an email:
 <dl>
 <dd>
 
-```java
-client.emails().provider().create(
-    CreateEmailProviderRequestContent
-        .builder()
-        .name(EmailProviderNameEnum.MAILGUN)
-        .credentials(
-            EmailProviderCredentialsSchema.of(
-                EmailProviderCredentialsSchemaZero
-                    .builder()
-                    .apiKey("api_key")
-                    .build()
-            )
-        )
+```java
+client.eventStreams().redeliveries().create(
+    "id",
+    CreateEventStreamRedeliveryRequestContent
+        .builder()
         .build()
 );
 ```
@@ -20383,7 +21361,7 @@ client.emails().provider().create(
 <dl>
 <dd>
 
-**name:** `EmailProviderNameEnum` 
+**id:** `String` — Unique identifier for the event stream.
     
 </dd>
 </dl>
@@ -20391,7 +21369,7 @@ client.emails().provider().create(
 <dl>
 <dd>
 
-**enabled:** `Optional<Boolean>` — Whether the provider is enabled (true) or disabled (false).
+**dateFrom:** `Optional<OffsetDateTime>` — An RFC-3339 date-time for redelivery start, inclusive. Does not allow sub-second precision.
     
 </dd>
 </dl>
@@ -20399,7 +21377,7 @@ client.emails().provider().create(
 <dl>
 <dd>
 
-**defaultFromAddress:** `Optional<String>` — Email address to use as "from" when no other address specified.
+**dateTo:** `Optional<OffsetDateTime>` — An RFC-3339 date-time for redelivery end, exclusive. Does not allow sub-second precision.
     
 </dd>
 </dl>
@@ -20407,7 +21385,7 @@ client.emails().provider().create(
 <dl>
 <dd>
 
-**credentials:** `EmailProviderCredentialsSchema` 
+**statuses:** `Optional<List<EventStreamDeliveryStatusEnum>>` — Filter by status
     
 </dd>
 </dl>
@@ -20415,7 +21393,7 @@ client.emails().provider().create(
 <dl>
 <dd>
 
-**settings:** `Optional<Map<String, Object>>` 
+**eventTypes:** `Optional<List<EventStreamEventTypeEnum>>` — Filter by event type
     
 </dd>
 </dl>
@@ -20427,11 +21405,11 @@ client.emails().provider().create(
 </dl>
 </details>
 
-<details><summary><code>client.emails.provider.delete()</code></summary>
+<details><summary><code>client.eventStreams.redeliveries.createById(id, eventId)</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -20439,13 +21417,15 @@ client.emails().provider().create(
 <dl>
 <dd>
 
-Delete the email provider.
+```java
+client.eventStreams().redeliveries().createById("id", "event_id");
+```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -20453,9 +21433,16 @@ Delete the email provider.
 <dl>
 <dd>
 
-```java
-client.emails().provider().delete();
-```
+**id:** `String` — Unique identifier for the event stream.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**eventId:** `String` — Unique identifier for the event
+    
 </dd>
 </dl>
 </dd>
@@ -20466,49 +21453,11 @@ client.emails().provider().delete();
 </dl>
 </details>
 
-<details><summary><code>client.emails.provider.update(request) -> UpdateEmailProviderResponseContent</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
+## Flows Executions
+<details><summary><code>client.flows.executions.list(flowId) -> SyncPagingIterable&amp;lt;FlowExecutionSummary&amp;gt;</code></summary>
 <dl>
 <dd>
 
-Update an [email provider](https://auth0.com/docs/email/providers). The `credentials` object
-requires different properties depending on the email provider (which is specified using the `name` property):
-
-- `mandrill` requires `api_key`
-- `sendgrid` requires `api_key`
-- `sparkpost` requires `api_key`. Optionally, set `region` to `eu` to use
-    the SparkPost service hosted in Western Europe; set to `null` to use the SparkPost service hosted in
-    North America. `eu` or `null` are the only valid values for `region`.
-- `mailgun` requires `api_key` and `domain`. Optionally, set `region` to
-    `eu` to use the Mailgun service hosted in Europe; set to `null` otherwise. `eu` or
-    `null` are the only valid values for `region`.
-- `ses` requires `accessKeyId`, `secretAccessKey`, and `region`
-- `smtp` requires `smtp_host`, `smtp_port`, `smtp_user`, and
-    `smtp_pass`
-
-Depending on the type of provider it is possible to specify `settings` object with different configuration
-options, which will be used when sending an email:
-
-- `smtp` provider, `settings` may contain `headers` object.
-    - When using AWS SES SMTP host, you may provide a name of configuration set in
-      `X-SES-Configuration-Set` header. Value must be a string.
-    - When using Sparkpost host, you may provide value for
-      `X-MSYS_API` header. Value must be an object.
-
-  For `ses` provider, `settings` may contain `message` object, where you can provide
-  a name of configuration set in `configuration_set_name` property. Value must be a string.
-</dd>
-</dl>
-</dd>
-</dl>
-
 #### 🔌 Usage
 
 <dl>
@@ -20518,9 +21467,13 @@ options, which will be used when sending an email:
 <dd>
 
 ```java
-client.emails().provider().update(
-    UpdateEmailProviderRequestContent
+client.flows().executions().list(
+    "flow_id",
+    ListFlowExecutionsRequestParameters
         .builder()
+        .includeTotals(true)
+        .from("from")
+        .take(1)
         .build()
 );
 ```
@@ -20537,15 +21490,7 @@ client.emails().provider().update(
 <dl>
 <dd>
 
-**name:** `Optional<EmailProviderNameEnum>` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**enabled:** `Optional<Boolean>` — Whether the provider is enabled (true) or disabled (false).
+**flowId:** `String` — Flow id
     
 </dd>
 </dl>
@@ -20553,7 +21498,7 @@ client.emails().provider().update(
 <dl>
 <dd>
 
-**defaultFromAddress:** `Optional<String>` — Email address to use as "from" when no other address specified.
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
     
 </dd>
 </dl>
@@ -20561,7 +21506,7 @@ client.emails().provider().update(
 <dl>
 <dd>
 
-**credentials:** `Optional<EmailProviderCredentialsSchema>` 
+**from:** `Optional<String>` — Optional Id from which to start selection.
     
 </dd>
 </dl>
@@ -20569,7 +21514,7 @@ client.emails().provider().update(
 <dl>
 <dd>
 
-**settings:** `Optional<Map<String, Object>>` 
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
     
 </dd>
 </dl>
@@ -20581,8 +21526,7 @@ client.emails().provider().update(
 </dl>
 </details>
 
-## EventStreams Deliveries
-<details><summary><code>client.eventStreams.deliveries.list(id) -> List&amp;lt;EventStreamDelivery&amp;gt;</code></summary>
+<details><summary><code>client.flows.executions.get(flowId, executionId) -> GetFlowExecutionResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -20595,16 +21539,14 @@ client.emails().provider().update(
 <dd>
 
 ```java
-client.eventStreams().deliveries().list(
-    "id",
-    ListEventStreamDeliveriesRequestParameters
+client.flows().executions().get(
+    "flow_id",
+    "execution_id",
+    GetFlowExecutionRequestParameters
         .builder()
-        .statuses("statuses")
-        .eventTypes("event_types")
-        .dateFrom("date_from")
-        .dateTo("date_to")
-        .from("from")
-        .take(1)
+        .hydrate(
+            Arrays.asList(GetFlowExecutionRequestParametersHydrateEnum.DEBUG)
+        )
         .build()
 );
 ```
@@ -20621,7 +21563,7 @@ client.eventStreams().deliveries().list(
 <dl>
 <dd>
 
-**id:** `String` — Unique identifier for the event stream.
+**flowId:** `String` — Flow id
     
 </dd>
 </dl>
@@ -20629,7 +21571,7 @@ client.eventStreams().deliveries().list(
 <dl>
 <dd>
 
-**statuses:** `Optional<String>` — Comma-separated list of statuses by which to filter
+**executionId:** `String` — Flow execution id
     
 </dd>
 </dl>
@@ -20637,31 +21579,47 @@ client.eventStreams().deliveries().list(
 <dl>
 <dd>
 
-**eventTypes:** `Optional<String>` — Comma-separated list of event types by which to filter
+**hydrate:** `Optional<GetFlowExecutionRequestParametersHydrateEnum>` — Hydration param
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**dateFrom:** `Optional<String>` — An RFC-3339 date-time for redelivery start, inclusive. Does not allow sub-second precision.
-    
 </dd>
 </dl>
+</details>
+
+<details><summary><code>client.flows.executions.delete(flowId, executionId)</code></summary>
+<dl>
+<dd>
+
+#### 🔌 Usage
 
 <dl>
 <dd>
 
-**dateTo:** `Optional<String>` — An RFC-3339 date-time for redelivery end, exclusive. Does not allow sub-second precision.
-    
+<dl>
+<dd>
+
+```java
+client.flows().executions().delete("flow_id", "execution_id");
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Optional Id from which to start selection.
+<dl>
+<dd>
+
+**flowId:** `String` — Flows id
     
 </dd>
 </dl>
@@ -20669,7 +21627,7 @@ client.eventStreams().deliveries().list(
 <dl>
 <dd>
 
-**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+**executionId:** `String` — Flow execution identifier
     
 </dd>
 </dl>
@@ -20681,7 +21639,8 @@ client.eventStreams().deliveries().list(
 </dl>
 </details>
 
-<details><summary><code>client.eventStreams.deliveries.getHistory(id, eventId) -> GetEventStreamDeliveryHistoryResponseContent</code></summary>
+## Flows Vault Connections
+<details><summary><code>client.flows.vault.connections.list() -> SyncPagingIterable&amp;lt;FlowsVaultConnectionSummary&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -20694,7 +21653,14 @@ client.eventStreams().deliveries().list(
 <dd>
 
 ```java
-client.eventStreams().deliveries().getHistory("id", "event_id");
+client.flows().vault().connections().list(
+    ListFlowsVaultConnectionsRequestParameters
+        .builder()
+        .page(1)
+        .perPage(1)
+        .includeTotals(true)
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -20709,7 +21675,7 @@ client.eventStreams().deliveries().getHistory("id", "event_id");
 <dl>
 <dd>
 
-**id:** `String` — Unique identifier for the event stream.
+**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
     
 </dd>
 </dl>
@@ -20717,7 +21683,15 @@ client.eventStreams().deliveries().getHistory("id", "event_id");
 <dl>
 <dd>
 
-**eventId:** `String` — Unique identifier for the event
+**perPage:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
     
 </dd>
 </dl>
@@ -20729,8 +21703,7 @@ client.eventStreams().deliveries().getHistory("id", "event_id");
 </dl>
 </details>
 
-## EventStreams Redeliveries
-<details><summary><code>client.eventStreams.redeliveries.create(id, request) -> CreateEventStreamRedeliveryResponseContent</code></summary>
+<details><summary><code>client.flows.vault.connections.create(request) -> CreateFlowsVaultConnectionResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -20743,11 +21716,24 @@ client.eventStreams().deliveries().getHistory("id", "event_id");
 <dd>
 
 ```java
-client.eventStreams().redeliveries().create(
-    "id",
-    CreateEventStreamRedeliveryRequestContent
-        .builder()
-        .build()
+client.flows().vault().connections().create(
+    CreateFlowsVaultConnectionRequestContent.of(
+        CreateFlowsVaultConnectionActivecampaign.of(
+            CreateFlowsVaultConnectionActivecampaignApiKey
+                .builder()
+                .name("name")
+                .appId(FlowsVaultConnectionAppIdActivecampaignEnum.ACTIVECAMPAIGN)
+                .setup(
+                    FlowsVaultConnectioSetupApiKeyWithBaseUrl
+                        .builder()
+                        .type(FlowsVaultConnectioSetupTypeApiKeyEnum.API_KEY)
+                        .apiKey("api_key")
+                        .baseUrl("base_url")
+                        .build()
+                )
+                .build()
+        )
+    )
 );
 ```
 </dd>
@@ -20763,39 +21749,47 @@ client.eventStreams().redeliveries().create(
 <dl>
 <dd>
 
-**id:** `String` — Unique identifier for the event stream.
+**request:** `CreateFlowsVaultConnectionRequestContent` 
     
 </dd>
 </dl>
+</dd>
+</dl>
 
-<dl>
-<dd>
 
-**dateFrom:** `Optional<OffsetDateTime>` — An RFC-3339 date-time for redelivery start, inclusive. Does not allow sub-second precision.
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.flows.vault.connections.get(id) -> GetFlowsVaultConnectionResponseContent</code></summary>
 <dl>
 <dd>
 
-**dateTo:** `Optional<OffsetDateTime>` — An RFC-3339 date-time for redelivery end, exclusive. Does not allow sub-second precision.
-    
-</dd>
-</dl>
+#### 🔌 Usage
 
 <dl>
 <dd>
 
-**statuses:** `Optional<List<EventStreamDeliveryStatusEnum>>` — Filter by status
-    
+<dl>
+<dd>
+
+```java
+client.flows().vault().connections().get("id");
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**eventTypes:** `Optional<List<EventStreamEventTypeEnum>>` — Filter by event type
+<dl>
+<dd>
+
+**id:** `String` — Flows Vault connection ID
     
 </dd>
 </dl>
@@ -20807,7 +21801,7 @@ client.eventStreams().redeliveries().create(
 </dl>
 </details>
 
-<details><summary><code>client.eventStreams.redeliveries.createById(id, eventId)</code></summary>
+<details><summary><code>client.flows.vault.connections.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -20820,7 +21814,7 @@ client.eventStreams().redeliveries().create(
 <dd>
 
 ```java
-client.eventStreams().redeliveries().createById("id", "event_id");
+client.flows().vault().connections().delete("id");
 ```
 </dd>
 </dl>
@@ -20835,15 +21829,7 @@ client.eventStreams().redeliveries().createById("id", "event_id");
 <dl>
 <dd>
 
-**id:** `String` — Unique identifier for the event stream.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**eventId:** `String` — Unique identifier for the event
+**id:** `String` — Vault connection id
     
 </dd>
 </dl>
@@ -20855,8 +21841,7 @@ client.eventStreams().redeliveries().createById("id", "event_id");
 </dl>
 </details>
 
-## Flows Executions
-<details><summary><code>client.flows.executions.list(flowId) -> SyncPagingIterable&amp;lt;FlowExecutionSummary&amp;gt;</code></summary>
+<details><summary><code>client.flows.vault.connections.update(id, request) -> UpdateFlowsVaultConnectionResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -20869,12 +21854,10 @@ client.eventStreams().redeliveries().createById("id", "event_id");
 <dd>
 
 ```java
-client.flows().executions().list(
-    "flow_id",
-    ListFlowExecutionsRequestParameters
+client.flows().vault().connections().update(
+    "id",
+    UpdateFlowsVaultConnectionRequestContent
         .builder()
-        .from("from")
-        .take(1)
         .build()
 );
 ```
@@ -20891,7 +21874,7 @@ client.flows().executions().list(
 <dl>
 <dd>
 
-**flowId:** `String` — Flow id
+**id:** `String` — Flows Vault connection ID
     
 </dd>
 </dl>
@@ -20899,7 +21882,7 @@ client.flows().executions().list(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Optional Id from which to start selection.
+**name:** `Optional<String>` — Flows Vault Connection name.
     
 </dd>
 </dl>
@@ -20907,7 +21890,7 @@ client.flows().executions().list(
 <dl>
 <dd>
 
-**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+**setup:** `Optional<UpdateFlowsVaultConnectionSetup>` 
     
 </dd>
 </dl>
@@ -20919,10 +21902,25 @@ client.flows().executions().list(
 </dl>
 </details>
 
-<details><summary><code>client.flows.executions.get(flowId, executionId) -> GetFlowExecutionResponseContent</code></summary>
+## Groups Members
+<details><summary><code>client.groups.members.get(id) -> SyncPagingIterable&amp;lt;GroupMember&amp;gt;</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
 <dl>
 <dd>
 
+List all users that are a member of this group.
+</dd>
+</dl>
+</dd>
+</dl>
+
 #### 🔌 Usage
 
 <dl>
@@ -20932,14 +21930,14 @@ client.flows().executions().list(
 <dd>
 
 ```java
-client.flows().executions().get(
-    "flow_id",
-    "execution_id",
-    GetFlowExecutionRequestParameters
+client.groups().members().get(
+    "id",
+    GetGroupMembersRequestParameters
         .builder()
-        .hydrate(
-            Arrays.asList(GetFlowExecutionRequestParametersHydrateEnum.DEBUG)
-        )
+        .fields("fields")
+        .includeFields(true)
+        .from("from")
+        .take(1)
         .build()
 );
 ```
@@ -20956,7 +21954,7 @@ client.flows().executions().get(
 <dl>
 <dd>
 
-**flowId:** `String` — Flow id
+**id:** `String` — Unique identifier for the group (service-generated).
     
 </dd>
 </dl>
@@ -20964,7 +21962,7 @@ client.flows().executions().get(
 <dl>
 <dd>
 
-**executionId:** `String` — Flow execution id
+**fields:** `Optional<String>` — A comma separated list of fields to include or exclude (depending on include_fields) from the result, empty to retrieve all fields
     
 </dd>
 </dl>
@@ -20972,70 +21970,52 @@ client.flows().executions().get(
 <dl>
 <dd>
 
-**hydrate:** `Optional<GetFlowExecutionRequestParametersHydrateEnum>` — Hydration param
+**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
     
 </dd>
 </dl>
-</dd>
-</dl>
 
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.flows.executions.delete(flowId, executionId)</code></summary>
 <dl>
 <dd>
 
-#### 🔌 Usage
-
-<dl>
-<dd>
+**from:** `Optional<String>` — Optional Id from which to start selection.
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
-```java
-client.flows().executions().delete("flow_id", "execution_id");
-```
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+    
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
 
+</dd>
+</dl>
+</details>
+
+## Groups Roles
+<details><summary><code>client.groups.roles.list(id) -> SyncPagingIterable&amp;lt;Role&amp;gt;</code></summary>
 <dl>
 <dd>
 
+#### 📝 Description
+
 <dl>
 <dd>
 
-**flowId:** `String` — Flows id
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**executionId:** `String` — Flow execution identifier
-    
-</dd>
-</dl>
+Lists the [roles](https://auth0.com/docs/manage-users/access-control/rbac) assigned to a group.
 </dd>
 </dl>
-
-
 </dd>
 </dl>
-</details>
-
-## Flows Vault Connections
-<details><summary><code>client.flows.vault.connections.list() -> SyncPagingIterable&amp;lt;FlowsVaultConnectionSummary&amp;gt;</code></summary>
-<dl>
-<dd>
 
 #### 🔌 Usage
 
@@ -21046,12 +22026,12 @@ client.flows().executions().delete("flow_id", "execution_id");
 <dd>
 
 ```java
-client.flows().vault().connections().list(
-    ListFlowsVaultConnectionsRequestParameters
+client.groups().roles().list(
+    "id",
+    ListGroupRolesRequestParameters
         .builder()
-        .page(1)
-        .perPage(1)
-        .includeTotals(true)
+        .from("from")
+        .take(1)
         .build()
 );
 ```
@@ -21068,7 +22048,7 @@ client.flows().vault().connections().list(
 <dl>
 <dd>
 
-**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
+**id:** `String` — Unique identifier for the group (service-generated).
     
 </dd>
 </dl>
@@ -21076,7 +22056,7 @@ client.flows().vault().connections().list(
 <dl>
 <dd>
 
-**perPage:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+**from:** `Optional<String>` — Optional Id from which to start selection.
     
 </dd>
 </dl>
@@ -21084,7 +22064,7 @@ client.flows().vault().connections().list(
 <dl>
 <dd>
 
-**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
     
 </dd>
 </dl>
@@ -21096,11 +22076,11 @@ client.flows().vault().connections().list(
 </dl>
 </details>
 
-<details><summary><code>client.flows.vault.connections.create(request) -> CreateFlowsVaultConnectionResponseContent</code></summary>
+<details><summary><code>client.groups.roles.create(id, request)</code></summary>
 <dl>
 <dd>
 
-#### 🔌 Usage
+#### 📝 Description
 
 <dl>
 <dd>
@@ -21108,33 +22088,13 @@ client.flows().vault().connections().list(
 <dl>
 <dd>
 
-```java
-client.flows().vault().connections().create(
-    CreateFlowsVaultConnectionRequestContent.of(
-        CreateFlowsVaultConnectionActivecampaign.of(
-            CreateFlowsVaultConnectionActivecampaignApiKey
-                .builder()
-                .name("name")
-                .appId(FlowsVaultConnectionAppIdActivecampaignEnum.ACTIVECAMPAIGN)
-                .setup(
-                    FlowsVaultConnectioSetupApiKeyWithBaseUrl
-                        .builder()
-                        .type(FlowsVaultConnectioSetupTypeApiKeyEnum.API_KEY)
-                        .apiKey("api_key")
-                        .baseUrl("base_url")
-                        .build()
-                )
-                .build()
-        )
-    )
-);
-```
+Assign one or more [roles](https://auth0.com/docs/manage-users/access-control/rbac) to a specified group.
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -21142,23 +22102,23 @@ client.flows().vault().connections().create(
 <dl>
 <dd>
 
-**request:** `CreateFlowsVaultConnectionRequestContent` 
-    
-</dd>
-</dl>
+```java
+client.groups().roles().create(
+    "id",
+    CreateGroupRolesRequestParameters
+        .builder()
+        .roles(
+            Arrays.asList("roles")
+        )
+        .build()
+);
+```
 </dd>
 </dl>
-
-
 </dd>
 </dl>
-</details>
-
-<details><summary><code>client.flows.vault.connections.get(id) -> GetFlowsVaultConnectionResponseContent</code></summary>
-<dl>
-<dd>
 
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -21166,23 +22126,15 @@ client.flows().vault().connections().create(
 <dl>
 <dd>
 
-```java
-client.flows().vault().connections().get("id");
-```
-</dd>
-</dl>
+**id:** `String` — Unique identifier for the group (service-generated).
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-**id:** `String` — Flows Vault connection ID
+**roles:** `List<String>` — Array of role IDs to assign to the group.
     
 </dd>
 </dl>
@@ -21194,27 +22146,11 @@ client.flows().vault().connections().get("id");
 </dl>
 </details>
 
-<details><summary><code>client.flows.vault.connections.delete(id)</code></summary>
-<dl>
-<dd>
-
-#### 🔌 Usage
-
-<dl>
-<dd>
-
+<details><summary><code>client.groups.roles.delete(id, request)</code></summary>
 <dl>
 <dd>
 
-```java
-client.flows().vault().connections().delete("id");
-```
-</dd>
-</dl>
-</dd>
-</dl>
-
-#### ⚙️ Parameters
+#### 📝 Description
 
 <dl>
 <dd>
@@ -21222,21 +22158,11 @@ client.flows().vault().connections().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — Vault connection id
-    
-</dd>
-</dl>
+Unassign one or more [roles](https://auth0.com/docs/manage-users/access-control/rbac) from a specified group.
 </dd>
 </dl>
-
-
 </dd>
 </dl>
-</details>
-
-<details><summary><code>client.flows.vault.connections.update(id, request) -> UpdateFlowsVaultConnectionResponseContent</code></summary>
-<dl>
-<dd>
 
 #### 🔌 Usage
 
@@ -21247,10 +22173,13 @@ client.flows().vault().connections().delete("id");
 <dd>
 
 ```java
-client.flows().vault().connections().update(
+client.groups().roles().delete(
     "id",
-    UpdateFlowsVaultConnectionRequestContent
+    DeleteGroupRolesRequestContent
         .builder()
+        .roles(
+            Arrays.asList("roles")
+        )
         .build()
 );
 ```
@@ -21267,15 +22196,7 @@ client.flows().vault().connections().update(
 <dl>
 <dd>
 
-**id:** `String` — Flows Vault connection ID
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**name:** `Optional<String>` — Flows Vault Connection name.
+**id:** `String` — Unique identifier for the group (service-generated).
     
 </dd>
 </dl>
@@ -21283,7 +22204,7 @@ client.flows().vault().connections().update(
 <dl>
 <dd>
 
-**setup:** `Optional<UpdateFlowsVaultConnectionSetup>` 
+**roles:** `List<String>` — Array of role IDs to remove from the group.
     
 </dd>
 </dl>
@@ -21295,8 +22216,8 @@ client.flows().vault().connections().update(
 </dl>
 </details>
 
-## Groups Members
-<details><summary><code>client.groups.members.get(id) -> SyncPagingIterable&amp;lt;GroupMember&amp;gt;</code></summary>
+## Guardian Enrollments
+<details><summary><code>client.guardian.enrollments.createTicket(request) -> CreateGuardianEnrollmentTicketResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -21308,7 +22229,7 @@ client.flows().vault().connections().update(
 <dl>
 <dd>
 
-List all users that are a member of this group.
+Create a [multi-factor authentication (MFA) enrollment ticket](https://auth0.com/docs/secure/multi-factor-authentication/auth0-guardian/create-custom-enrollment-tickets), and optionally send an email with the created ticket to a given user. Enrollment tickets can specify which factor users must enroll with or allow existing MFA users to enroll in additional factors.
 </dd>
 </dl>
 </dd>
@@ -21323,14 +22244,10 @@ List all users that are a member of this group.
 <dd>
 
 ```java
-client.groups().members().get(
-    "id",
-    GetGroupMembersRequestParameters
+client.guardian().enrollments().createTicket(
+    CreateGuardianEnrollmentTicketRequestContent
         .builder()
-        .fields("fields")
-        .includeFields(true)
-        .from("from")
-        .take(1)
+        .userId("user_id")
         .build()
 );
 ```
@@ -21347,7 +22264,15 @@ client.groups().members().get(
 <dl>
 <dd>
 
-**id:** `String` — Unique identifier for the group (service-generated).
+**userId:** `String` — user_id for the enrollment ticket
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**email:** `Optional<String>` — alternate email to which the enrollment email will be sent. Optional - by default, the email will be sent to the user's default address
     
 </dd>
 </dl>
@@ -21355,7 +22280,7 @@ client.groups().members().get(
 <dl>
 <dd>
 
-**fields:** `Optional<String>` — A comma separated list of fields to include or exclude (depending on include_fields) from the result, empty to retrieve all fields
+**sendMail:** `Optional<Boolean>` — Send an email to the user to start the enrollment
     
 </dd>
 </dl>
@@ -21363,7 +22288,7 @@ client.groups().members().get(
 <dl>
 <dd>
 
-**includeFields:** `Optional<Boolean>` — Whether specified fields are to be included (true) or excluded (false).
+**emailLocale:** `Optional<String>` — Optional. Specify the locale of the enrollment email. Used with send_email.
     
 </dd>
 </dl>
@@ -21371,7 +22296,7 @@ client.groups().members().get(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — Optional Id from which to start selection.
+**factor:** `Optional<GuardianEnrollmentFactorEnum>` 
     
 </dd>
 </dl>
@@ -21379,7 +22304,7 @@ client.groups().members().get(
 <dl>
 <dd>
 
-**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+**allowMultipleEnrollments:** `Optional<Boolean>` — Optional. Allows a user who has previously enrolled in MFA to enroll with additional factors.<br />Note: Parameter can only be used with Universal Login; it cannot be used with Classic Login or custom MFA pages.
     
 </dd>
 </dl>
@@ -21391,8 +22316,7 @@ client.groups().members().get(
 </dl>
 </details>
 
-## Groups Roles
-<details><summary><code>client.groups.roles.list(id) -> SyncPagingIterable&amp;lt;Role&amp;gt;</code></summary>
+<details><summary><code>client.guardian.enrollments.get(id) -> GetGuardianEnrollmentResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -21404,7 +22328,7 @@ client.groups().members().get(
 <dl>
 <dd>
 
-Lists the [roles](https://auth0.com/docs/manage-users/access-control/rbac) assigned to a group.
+Retrieve details, such as status and type, for a specific multi-factor authentication enrollment registered to a user account.
 </dd>
 </dl>
 </dd>
@@ -21419,14 +22343,7 @@ Lists the [roles](https://auth0.com/docs/manage-users/access-control/rbac) assig
 <dd>
 
 ```java
-client.groups().roles().list(
-    "id",
-    ListGroupRolesRequestParameters
-        .builder()
-        .from("from")
-        .take(1)
-        .build()
-);
+client.guardian().enrollments().get("id");
 ```
 </dd>
 </dl>
@@ -21441,23 +22358,7 @@ client.groups().roles().list(
 <dl>
 <dd>
 
-**id:** `String` — Unique identifier for the group (service-generated).
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**from:** `Optional<String>` — Optional Id from which to start selection.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+**id:** `String` — ID of the enrollment to be retrieve.
     
 </dd>
 </dl>
@@ -21469,7 +22370,7 @@ client.groups().roles().list(
 </dl>
 </details>
 
-<details><summary><code>client.groups.roles.create(id, request)</code></summary>
+<details><summary><code>client.guardian.enrollments.delete(id)</code></summary>
 <dl>
 <dd>
 
@@ -21481,7 +22382,7 @@ client.groups().roles().list(
 <dl>
 <dd>
 
-Assign one or more [roles](https://auth0.com/docs/manage-users/access-control/rbac) to a specified group.
+Remove a specific multi-factor authentication (MFA) enrollment from a user's account. This allows the user to re-enroll with MFA. For more information, review [Reset User Multi-Factor Authentication and Recovery Codes](https://auth0.com/docs/secure/multi-factor-authentication/reset-user-mfa).
 </dd>
 </dl>
 </dd>
@@ -21496,15 +22397,7 @@ Assign one or more [roles](https://auth0.com/docs/manage-users/access-control/rb
 <dd>
 
 ```java
-client.groups().roles().create(
-    "id",
-    CreateGroupRolesRequestParameters
-        .builder()
-        .roles(
-            Arrays.asList("roles")
-        )
-        .build()
-);
+client.guardian().enrollments().delete("id");
 ```
 </dd>
 </dl>
@@ -21519,16 +22412,48 @@ client.groups().roles().create(
 <dl>
 <dd>
 
-**id:** `String` — Unique identifier for the group (service-generated).
+**id:** `String` — ID of the enrollment to be deleted.
     
 </dd>
 </dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
 
+## Guardian Factors
+<details><summary><code>client.guardian.factors.list() -> List&amp;lt;GuardianFactor&amp;gt;</code></summary>
 <dl>
 <dd>
 
-**roles:** `List<String>` — Array of role IDs to assign to the group.
-    
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Retrieve details of all <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors">multi-factor authentication factors</a> associated with your tenant.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.guardian().factors().list();
+```
 </dd>
 </dl>
 </dd>
@@ -21539,7 +22464,7 @@ client.groups().roles().create(
 </dl>
 </details>
 
-<details><summary><code>client.groups.roles.delete(id, request)</code></summary>
+<details><summary><code>client.guardian.factors.set(name, request) -> SetGuardianFactorResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -21551,7 +22476,7 @@ client.groups().roles().create(
 <dl>
 <dd>
 
-Unassign one or more [roles](https://auth0.com/docs/manage-users/access-control/rbac) from a specified group.
+Update the status (i.e., enabled or disabled) of a specific multi-factor authentication factor.
 </dd>
 </dl>
 </dd>
@@ -21566,13 +22491,11 @@ Unassign one or more [roles](https://auth0.com/docs/manage-users/access-control/
 <dd>
 
 ```java
-client.groups().roles().delete(
-    "id",
-    DeleteGroupRolesRequestContent
+client.guardian().factors().set(
+    GuardianFactorNameEnum.PUSH_NOTIFICATION,
+    SetGuardianFactorRequestContent
         .builder()
-        .roles(
-            Arrays.asList("roles")
-        )
+        .enabled(true)
         .build()
 );
 ```
@@ -21589,7 +22512,7 @@ client.groups().roles().delete(
 <dl>
 <dd>
 
-**id:** `String` — Unique identifier for the group (service-generated).
+**name:** `GuardianFactorNameEnum` — Factor name. Can be `sms`, `push-notification`, `email`, `duo` `otp` `webauthn-roaming`, `webauthn-platform`, or `recovery-code`.
     
 </dd>
 </dl>
@@ -21597,7 +22520,7 @@ client.groups().roles().delete(
 <dl>
 <dd>
 
-**roles:** `List<String>` — Array of role IDs to remove from the group.
+**enabled:** `Boolean` — Whether this factor is enabled (true) or disabled (false).
     
 </dd>
 </dl>
@@ -21609,8 +22532,8 @@ client.groups().roles().delete(
 </dl>
 </details>
 
-## Guardian Enrollments
-<details><summary><code>client.guardian.enrollments.createTicket(request) -> CreateGuardianEnrollmentTicketResponseContent</code></summary>
+## Guardian Policies
+<details><summary><code>client.guardian.policies.list() -> List&amp;lt;MfaPolicyEnum&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -21622,7 +22545,14 @@ client.groups().roles().delete(
 <dl>
 <dd>
 
-Create a [multi-factor authentication (MFA) enrollment ticket](https://auth0.com/docs/secure/multi-factor-authentication/auth0-guardian/create-custom-enrollment-tickets), and optionally send an email with the created ticket to a given user. Enrollment tickets can specify which factor users must enroll with or allow existing MFA users to enroll in additional factors.
+Retrieve the [multi-factor authentication (MFA) policies](https://auth0.com/docs/secure/multi-factor-authentication/enable-mfa) configured for your tenant.
+
+The following policies are supported:
+
+- `all-applications` policy prompts with MFA for all logins.
+- `confidence-score` policy prompts with MFA only for low confidence logins.
+
+**Note**: The `confidence-score` policy is part of the [Adaptive MFA feature](https://auth0.com/docs/secure/multi-factor-authentication/adaptive-mfa). Adaptive MFA requires an add-on for the Enterprise plan; review [Auth0 Pricing](https://auth0.com/pricing) for more details.
 </dd>
 </dl>
 </dd>
@@ -21637,67 +22567,70 @@ Create a [multi-factor authentication (MFA) enrollment ticket](https://auth0.com
 <dd>
 
 ```java
-client.guardian().enrollments().createTicket(
-    CreateGuardianEnrollmentTicketRequestContent
-        .builder()
-        .userId("user_id")
-        .build()
-);
+client.guardian().policies().list();
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
 
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.guardian.policies.set(request) -> List&amp;lt;MfaPolicyEnum&amp;gt;</code></summary>
 <dl>
 <dd>
 
+#### 📝 Description
+
 <dl>
 <dd>
 
-**userId:** `String` — user_id for the enrollment ticket
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**email:** `Optional<String>` — alternate email to which the enrollment email will be sent. Optional - by default, the email will be sent to the user's default address
-    
+Set [multi-factor authentication (MFA) policies](https://auth0.com/docs/secure/multi-factor-authentication/enable-mfa) for your tenant.
+
+The following policies are supported:
+
+- `all-applications` policy prompts with MFA for all logins.
+- `confidence-score` policy prompts with MFA only for low confidence logins.
+
+**Note**: The `confidence-score` policy is part of the [Adaptive MFA feature](https://auth0.com/docs/secure/multi-factor-authentication/adaptive-mfa). Adaptive MFA requires an add-on for the Enterprise plan; review [Auth0 Pricing](https://auth0.com/pricing) for more details.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**sendMail:** `Optional<Boolean>` — Send an email to the user to start the enrollment
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**emailLocale:** `Optional<String>` — Optional. Specify the locale of the enrollment email. Used with send_email.
-    
+```java
+client.guardian().policies().set(
+    Arrays.asList(MfaPolicyEnum.ALL_APPLICATIONS)
+);
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**factor:** `Optional<GuardianEnrollmentFactorEnum>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**allowMultipleEnrollments:** `Optional<Boolean>` — Optional. Allows a user who has previously enrolled in MFA to enroll with additional factors.<br />Note: Parameter can only be used with Universal Login; it cannot be used with Classic Login or custom MFA pages.
+**request:** `List<MfaPolicyEnum>` 
     
 </dd>
 </dl>
@@ -21709,7 +22642,8 @@ client.guardian().enrollments().createTicket(
 </dl>
 </details>
 
-<details><summary><code>client.guardian.enrollments.get(id) -> GetGuardianEnrollmentResponseContent</code></summary>
+## Guardian Factors Phone
+<details><summary><code>client.guardian.factors.phone.getMessageTypes() -> GetGuardianFactorPhoneMessageTypesResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -21721,7 +22655,7 @@ client.guardian().enrollments().createTicket(
 <dl>
 <dd>
 
-Retrieve details, such as status and type, for a specific multi-factor authentication enrollment registered to a user account.
+Retrieve list of <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-sms-voice-notifications-mfa">phone-type MFA factors</a> (i.e., sms and voice) that are enabled for your tenant.
 </dd>
 </dl>
 </dd>
@@ -21736,34 +22670,19 @@ Retrieve details, such as status and type, for a specific multi-factor authentic
 <dd>
 
 ```java
-client.guardian().enrollments().get("id");
+client.guardian().factors().phone().getMessageTypes();
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**id:** `String` — ID of the enrollment to be retrieve.
-    
-</dd>
-</dl>
-</dd>
-</dl>
-
 
 </dd>
 </dl>
 </details>
 
-<details><summary><code>client.guardian.enrollments.delete(id)</code></summary>
+<details><summary><code>client.guardian.factors.phone.setMessageTypes(request) -> SetGuardianFactorPhoneMessageTypesResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -21775,7 +22694,7 @@ client.guardian().enrollments().get("id");
 <dl>
 <dd>
 
-Remove a specific multi-factor authentication (MFA) enrollment from a user's account. This allows the user to re-enroll with MFA. For more information, review [Reset User Multi-Factor Authentication and Recovery Codes](https://auth0.com/docs/secure/multi-factor-authentication/reset-user-mfa).
+Replace the list of <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-sms-voice-notifications-mfa">phone-type MFA factors</a> (i.e., sms and voice) that are enabled for your tenant.
 </dd>
 </dl>
 </dd>
@@ -21790,7 +22709,14 @@ Remove a specific multi-factor authentication (MFA) enrollment from a user's acc
 <dd>
 
 ```java
-client.guardian().enrollments().delete("id");
+client.guardian().factors().phone().setMessageTypes(
+    SetGuardianFactorPhoneMessageTypesRequestContent
+        .builder()
+        .messageTypes(
+            Arrays.asList(GuardianFactorPhoneFactorMessageTypeEnum.SMS)
+        )
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -21805,7 +22731,7 @@ client.guardian().enrollments().delete("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the enrollment to be deleted.
+**messageTypes:** `List<GuardianFactorPhoneFactorMessageTypeEnum>` — The list of phone factors to enable on the tenant. Can include `sms` and `voice`.
     
 </dd>
 </dl>
@@ -21817,8 +22743,7 @@ client.guardian().enrollments().delete("id");
 </dl>
 </details>
 
-## Guardian Factors
-<details><summary><code>client.guardian.factors.list() -> List&amp;lt;GuardianFactor&amp;gt;</code></summary>
+<details><summary><code>client.guardian.factors.phone.getTwilioProvider() -> GetGuardianFactorsProviderPhoneTwilioResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -21830,7 +22755,7 @@ client.guardian().enrollments().delete("id");
 <dl>
 <dd>
 
-Retrieve details of all <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors">multi-factor authentication factors</a> associated with your tenant.
+Retrieve configuration details for a Twilio phone provider that has been set up in your tenant. To learn more, review <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-sms-voice-notifications-mfa">Configure SMS and Voice Notifications for MFA</a>. 
 </dd>
 </dl>
 </dd>
@@ -21845,7 +22770,7 @@ Retrieve details of all <a href="https://auth0.com/docs/secure/multi-factor-auth
 <dd>
 
 ```java
-client.guardian().factors().list();
+client.guardian().factors().phone().getTwilioProvider();
 ```
 </dd>
 </dl>
@@ -21857,7 +22782,7 @@ client.guardian().factors().list();
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.set(name, request) -> SetGuardianFactorResponseContent</code></summary>
+<details><summary><code>client.guardian.factors.phone.setTwilioProvider(request) -> SetGuardianFactorsProviderPhoneTwilioResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -21869,7 +22794,7 @@ client.guardian().factors().list();
 <dl>
 <dd>
 
-Update the status (i.e., enabled or disabled) of a specific multi-factor authentication factor.
+Update the configuration of a Twilio phone provider that has been set up in your tenant. To learn more, review <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-sms-voice-notifications-mfa">Configure SMS and Voice Notifications for MFA</a>. 
 </dd>
 </dl>
 </dd>
@@ -21884,11 +22809,9 @@ Update the status (i.e., enabled or disabled) of a specific multi-factor authent
 <dd>
 
 ```java
-client.guardian().factors().set(
-    GuardianFactorNameEnum.PUSH_NOTIFICATION,
-    SetGuardianFactorRequestContent
+client.guardian().factors().phone().setTwilioProvider(
+    SetGuardianFactorsProviderPhoneTwilioRequestContent
         .builder()
-        .enabled(true)
         .build()
 );
 ```
@@ -21905,7 +22828,23 @@ client.guardian().factors().set(
 <dl>
 <dd>
 
-**name:** `GuardianFactorNameEnum` — Factor name. Can be `sms`, `push-notification`, `email`, `duo` `otp` `webauthn-roaming`, `webauthn-platform`, or `recovery-code`.
+**from:** `Optional<String>` — From number
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**messagingServiceSid:** `Optional<String>` — Copilot SID
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**authToken:** `Optional<String>` — Twilio Authentication token
     
 </dd>
 </dl>
@@ -21913,7 +22852,7 @@ client.guardian().factors().set(
 <dl>
 <dd>
 
-**enabled:** `Boolean` — Whether this factor is enabled (true) or disabled (false).
+**sid:** `Optional<String>` — Twilio SID
     
 </dd>
 </dl>
@@ -21925,8 +22864,7 @@ client.guardian().factors().set(
 </dl>
 </details>
 
-## Guardian Policies
-<details><summary><code>client.guardian.policies.list() -> List&amp;lt;MfaPolicyEnum&amp;gt;</code></summary>
+<details><summary><code>client.guardian.factors.phone.getSelectedProvider() -> GetGuardianFactorsProviderPhoneResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -21938,14 +22876,7 @@ client.guardian().factors().set(
 <dl>
 <dd>
 
-Retrieve the [multi-factor authentication (MFA) policies](https://auth0.com/docs/secure/multi-factor-authentication/enable-mfa) configured for your tenant.
-
-The following policies are supported:
-
-- `all-applications` policy prompts with MFA for all logins.
-- `confidence-score` policy prompts with MFA only for low confidence logins.
-
-**Note**: The `confidence-score` policy is part of the [Adaptive MFA feature](https://auth0.com/docs/secure/multi-factor-authentication/adaptive-mfa). Adaptive MFA requires an add-on for the Enterprise plan; review [Auth0 Pricing](https://auth0.com/pricing) for more details.
+Retrieve details of the multi-factor authentication phone provider configured for your tenant.
 </dd>
 </dl>
 </dd>
@@ -21960,7 +22891,7 @@ The following policies are supported:
 <dd>
 
 ```java
-client.guardian().policies().list();
+client.guardian().factors().phone().getSelectedProvider();
 ```
 </dd>
 </dl>
@@ -21972,31 +22903,10 @@ client.guardian().policies().list();
 </dl>
 </details>
 
-<details><summary><code>client.guardian.policies.set(request) -> List&amp;lt;MfaPolicyEnum&amp;gt;</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
-
-<dl>
-<dd>
-
+<details><summary><code>client.guardian.factors.phone.setProvider(request) -> SetGuardianFactorsProviderPhoneResponseContent</code></summary>
 <dl>
 <dd>
 
-Set [multi-factor authentication (MFA) policies](https://auth0.com/docs/secure/multi-factor-authentication/enable-mfa) for your tenant.
-
-The following policies are supported:
-
-- `all-applications` policy prompts with MFA for all logins.
-- `confidence-score` policy prompts with MFA only for low confidence logins.
-
-**Note**: The `confidence-score` policy is part of the [Adaptive MFA feature](https://auth0.com/docs/secure/multi-factor-authentication/adaptive-mfa). Adaptive MFA requires an add-on for the Enterprise plan; review [Auth0 Pricing](https://auth0.com/pricing) for more details.
-</dd>
-</dl>
-</dd>
-</dl>
-
 #### 🔌 Usage
 
 <dl>
@@ -22006,8 +22916,11 @@ The following policies are supported:
 <dd>
 
 ```java
-client.guardian().policies().set(
-    Arrays.asList(MfaPolicyEnum.ALL_APPLICATIONS)
+client.guardian().factors().phone().setProvider(
+    SetGuardianFactorsProviderPhoneRequestContent
+        .builder()
+        .provider(GuardianFactorsProviderSmsProviderEnum.AUTH0)
+        .build()
 );
 ```
 </dd>
@@ -22023,7 +22936,7 @@ client.guardian().policies().set(
 <dl>
 <dd>
 
-**request:** `List<MfaPolicyEnum>` 
+**provider:** `GuardianFactorsProviderSmsProviderEnum` 
     
 </dd>
 </dl>
@@ -22035,8 +22948,7 @@ client.guardian().policies().set(
 </dl>
 </details>
 
-## Guardian Factors Phone
-<details><summary><code>client.guardian.factors.phone.getMessageTypes() -> GetGuardianFactorPhoneMessageTypesResponseContent</code></summary>
+<details><summary><code>client.guardian.factors.phone.getTemplates() -> GetGuardianFactorPhoneTemplatesResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -22048,7 +22960,7 @@ client.guardian().policies().set(
 <dl>
 <dd>
 
-Retrieve list of <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-sms-voice-notifications-mfa">phone-type MFA factors</a> (i.e., sms and voice) that are enabled for your tenant.
+Retrieve details of the multi-factor authentication enrollment and verification templates for phone-type factors available in your tenant.
 </dd>
 </dl>
 </dd>
@@ -22063,7 +22975,7 @@ Retrieve list of <a href="https://auth0.com/docs/secure/multi-factor-authenticat
 <dd>
 
 ```java
-client.guardian().factors().phone().getMessageTypes();
+client.guardian().factors().phone().getTemplates();
 ```
 </dd>
 </dl>
@@ -22075,7 +22987,7 @@ client.guardian().factors().phone().getMessageTypes();
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.phone.setMessageTypes(request) -> SetGuardianFactorPhoneMessageTypesResponseContent</code></summary>
+<details><summary><code>client.guardian.factors.phone.setTemplates(request) -> SetGuardianFactorPhoneTemplatesResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -22087,7 +22999,7 @@ client.guardian().factors().phone().getMessageTypes();
 <dl>
 <dd>
 
-Replace the list of <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-sms-voice-notifications-mfa">phone-type MFA factors</a> (i.e., sms and voice) that are enabled for your tenant.
+Customize the messages sent to complete phone enrollment and verification (subscription required).
 </dd>
 </dl>
 </dd>
@@ -22102,12 +23014,11 @@ Replace the list of <a href="https://auth0.com/docs/secure/multi-factor-authenti
 <dd>
 
 ```java
-client.guardian().factors().phone().setMessageTypes(
-    SetGuardianFactorPhoneMessageTypesRequestContent
+client.guardian().factors().phone().setTemplates(
+    SetGuardianFactorPhoneTemplatesRequestContent
         .builder()
-        .messageTypes(
-            Arrays.asList(GuardianFactorPhoneFactorMessageTypeEnum.SMS)
-        )
+        .enrollmentMessage("enrollment_message")
+        .verificationMessage("verification_message")
         .build()
 );
 ```
@@ -22124,7 +23035,15 @@ client.guardian().factors().phone().setMessageTypes(
 <dl>
 <dd>
 
-**messageTypes:** `List<GuardianFactorPhoneFactorMessageTypeEnum>` — The list of phone factors to enable on the tenant. Can include `sms` and `voice`.
+**enrollmentMessage:** `String` — Message sent to the user when they are invited to enroll with a phone number.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**verificationMessage:** `String` — Message sent to the user when they are prompted to verify their account.
     
 </dd>
 </dl>
@@ -22136,7 +23055,8 @@ client.guardian().factors().phone().setMessageTypes(
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.phone.getTwilioProvider() -> GetGuardianFactorsProviderPhoneTwilioResponseContent</code></summary>
+## Guardian Factors PushNotification
+<details><summary><code>client.guardian.factors.pushNotification.getApnsProvider() -> GetGuardianFactorsProviderApnsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -22148,7 +23068,7 @@ client.guardian().factors().phone().setMessageTypes(
 <dl>
 <dd>
 
-Retrieve configuration details for a Twilio phone provider that has been set up in your tenant. To learn more, review <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-sms-voice-notifications-mfa">Configure SMS and Voice Notifications for MFA</a>. 
+Retrieve configuration details for the multi-factor authentication APNS provider associated with your tenant.
 </dd>
 </dl>
 </dd>
@@ -22163,7 +23083,7 @@ Retrieve configuration details for a Twilio phone provider that has been set up
 <dd>
 
 ```java
-client.guardian().factors().phone().getTwilioProvider();
+client.guardian().factors().pushNotification().getApnsProvider();
 ```
 </dd>
 </dl>
@@ -22175,7 +23095,7 @@ client.guardian().factors().phone().getTwilioProvider();
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.phone.setTwilioProvider(request) -> SetGuardianFactorsProviderPhoneTwilioResponseContent</code></summary>
+<details><summary><code>client.guardian.factors.pushNotification.setApnsProvider(request) -> SetGuardianFactorsProviderPushNotificationApnsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -22187,7 +23107,7 @@ client.guardian().factors().phone().getTwilioProvider();
 <dl>
 <dd>
 
-Update the configuration of a Twilio phone provider that has been set up in your tenant. To learn more, review <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-sms-voice-notifications-mfa">Configure SMS and Voice Notifications for MFA</a>. 
+Overwrite all configuration details of the multi-factor authentication APNS provider associated with your tenant.
 </dd>
 </dl>
 </dd>
@@ -22202,8 +23122,8 @@ Update the configuration of a Twilio phone provider that has been set up in your
 <dd>
 
 ```java
-client.guardian().factors().phone().setTwilioProvider(
-    SetGuardianFactorsProviderPhoneTwilioRequestContent
+client.guardian().factors().pushNotification().setApnsProvider(
+    SetGuardianFactorsProviderPushNotificationApnsRequestContent
         .builder()
         .build()
 );
@@ -22221,15 +23141,7 @@ client.guardian().factors().phone().setTwilioProvider(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — From number
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**messagingServiceSid:** `Optional<String>` — Copilot SID
+**sandbox:** `Optional<Boolean>` 
     
 </dd>
 </dl>
@@ -22237,7 +23149,7 @@ client.guardian().factors().phone().setTwilioProvider(
 <dl>
 <dd>
 
-**authToken:** `Optional<String>` — Twilio Authentication token
+**bundleId:** `Optional<String>` 
     
 </dd>
 </dl>
@@ -22245,7 +23157,7 @@ client.guardian().factors().phone().setTwilioProvider(
 <dl>
 <dd>
 
-**sid:** `Optional<String>` — Twilio SID
+**p12:** `Optional<String>` 
     
 </dd>
 </dl>
@@ -22257,7 +23169,7 @@ client.guardian().factors().phone().setTwilioProvider(
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.phone.getSelectedProvider() -> GetGuardianFactorsProviderPhoneResponseContent</code></summary>
+<details><summary><code>client.guardian.factors.pushNotification.updateApnsProvider(request) -> UpdateGuardianFactorsProviderPushNotificationApnsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -22269,7 +23181,7 @@ client.guardian().factors().phone().setTwilioProvider(
 <dl>
 <dd>
 
-Retrieve details of the multi-factor authentication phone provider configured for your tenant.
+Modify configuration details of the multi-factor authentication APNS provider associated with your tenant.
 </dd>
 </dl>
 </dd>
@@ -22284,23 +23196,18 @@ Retrieve details of the multi-factor authentication phone provider configured fo
 <dd>
 
 ```java
-client.guardian().factors().phone().getSelectedProvider();
+client.guardian().factors().pushNotification().updateApnsProvider(
+    UpdateGuardianFactorsProviderPushNotificationApnsRequestContent
+        .builder()
+        .build()
+);
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.guardian.factors.phone.setProvider(request) -> SetGuardianFactorsProviderPhoneResponseContent</code></summary>
-<dl>
-<dd>
-
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -22308,28 +23215,23 @@ client.guardian().factors().phone().getSelectedProvider();
 <dl>
 <dd>
 
-```java
-client.guardian().factors().phone().setProvider(
-    SetGuardianFactorsProviderPhoneRequestContent
-        .builder()
-        .provider(GuardianFactorsProviderSmsProviderEnum.AUTH0)
-        .build()
-);
-```
-</dd>
-</dl>
+**sandbox:** `Optional<Boolean>` 
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
 <dl>
 <dd>
 
+**bundleId:** `Optional<String>` 
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**provider:** `GuardianFactorsProviderSmsProviderEnum` 
+**p12:** `Optional<String>` 
     
 </dd>
 </dl>
@@ -22341,7 +23243,7 @@ client.guardian().factors().phone().setProvider(
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.phone.getTemplates() -> GetGuardianFactorPhoneTemplatesResponseContent</code></summary>
+<details><summary><code>client.guardian.factors.pushNotification.setFcmProvider(request) -> Map&amp;lt;String, Object&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -22353,7 +23255,7 @@ client.guardian().factors().phone().setProvider(
 <dl>
 <dd>
 
-Retrieve details of the multi-factor authentication enrollment and verification templates for phone-type factors available in your tenant.
+Overwrite all configuration details of the multi-factor authentication FCM provider associated with your tenant.
 </dd>
 </dl>
 </dd>
@@ -22368,19 +23270,38 @@ Retrieve details of the multi-factor authentication enrollment and verification
 <dd>
 
 ```java
-client.guardian().factors().phone().getTemplates();
+client.guardian().factors().pushNotification().setFcmProvider(
+    SetGuardianFactorsProviderPushNotificationFcmRequestContent
+        .builder()
+        .build()
+);
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**serverKey:** `Optional<String>` 
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
 
 </dd>
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.phone.setTemplates(request) -> SetGuardianFactorPhoneTemplatesResponseContent</code></summary>
+<details><summary><code>client.guardian.factors.pushNotification.updateFcmProvider(request) -> Map&amp;lt;String, Object&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -22392,7 +23313,7 @@ client.guardian().factors().phone().getTemplates();
 <dl>
 <dd>
 
-Customize the messages sent to complete phone enrollment and verification (subscription required).
+Modify configuration details of the multi-factor authentication FCM provider associated with your tenant.
 </dd>
 </dl>
 </dd>
@@ -22407,11 +23328,9 @@ Customize the messages sent to complete phone enrollment and verification (subsc
 <dd>
 
 ```java
-client.guardian().factors().phone().setTemplates(
-    SetGuardianFactorPhoneTemplatesRequestContent
+client.guardian().factors().pushNotification().updateFcmProvider(
+    UpdateGuardianFactorsProviderPushNotificationFcmRequestContent
         .builder()
-        .enrollmentMessage("enrollment_message")
-        .verificationMessage("verification_message")
         .build()
 );
 ```
@@ -22428,15 +23347,7 @@ client.guardian().factors().phone().setTemplates(
 <dl>
 <dd>
 
-**enrollmentMessage:** `String` — Message sent to the user when they are invited to enroll with a phone number.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**verificationMessage:** `String` — Message sent to the user when they are prompted to verify their account.
+**serverKey:** `Optional<String>` 
     
 </dd>
 </dl>
@@ -22448,8 +23359,7 @@ client.guardian().factors().phone().setTemplates(
 </dl>
 </details>
 
-## Guardian Factors PushNotification
-<details><summary><code>client.guardian.factors.pushNotification.getApnsProvider() -> GetGuardianFactorsProviderApnsResponseContent</code></summary>
+<details><summary><code>client.guardian.factors.pushNotification.setFcmv1Provider(request) -> Map&amp;lt;String, Object&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -22461,7 +23371,7 @@ client.guardian().factors().phone().setTemplates(
 <dl>
 <dd>
 
-Retrieve configuration details for the multi-factor authentication APNS provider associated with your tenant.
+Overwrite all configuration details of the multi-factor authentication FCMV1 provider associated with your tenant.
 </dd>
 </dl>
 </dd>
@@ -22476,19 +23386,38 @@ Retrieve configuration details for the multi-factor authentication APNS provider
 <dd>
 
 ```java
-client.guardian().factors().pushNotification().getApnsProvider();
+client.guardian().factors().pushNotification().setFcmv1Provider(
+    SetGuardianFactorsProviderPushNotificationFcmv1RequestContent
+        .builder()
+        .build()
+);
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**serverCredentials:** `Optional<String>` 
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
 
 </dd>
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.pushNotification.setApnsProvider(request) -> SetGuardianFactorsProviderPushNotificationApnsResponseContent</code></summary>
+<details><summary><code>client.guardian.factors.pushNotification.updateFcmv1Provider(request) -> Map&amp;lt;String, Object&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -22500,7 +23429,7 @@ client.guardian().factors().pushNotification().getApnsProvider();
 <dl>
 <dd>
 
-Overwrite all configuration details of the multi-factor authentication APNS provider associated with your tenant.
+Modify configuration details of the multi-factor authentication FCMV1 provider associated with your tenant.
 </dd>
 </dl>
 </dd>
@@ -22515,8 +23444,8 @@ Overwrite all configuration details of the multi-factor authentication APNS prov
 <dd>
 
 ```java
-client.guardian().factors().pushNotification().setApnsProvider(
-    SetGuardianFactorsProviderPushNotificationApnsRequestContent
+client.guardian().factors().pushNotification().updateFcmv1Provider(
+    UpdateGuardianFactorsProviderPushNotificationFcmv1RequestContent
         .builder()
         .build()
 );
@@ -22534,24 +23463,47 @@ client.guardian().factors().pushNotification().setApnsProvider(
 <dl>
 <dd>
 
-**sandbox:** `Optional<Boolean>` 
+**serverCredentials:** `Optional<String>` 
     
 </dd>
 </dl>
+</dd>
+</dl>
+
+
+</dd>
+</dl>
+</details>
 
+<details><summary><code>client.guardian.factors.pushNotification.getSnsProvider() -> GetGuardianFactorsProviderSnsResponseContent</code></summary>
 <dl>
 <dd>
 
-**bundleId:** `Optional<String>` 
-    
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Retrieve configuration details for an AWS SNS push notification provider that has been enabled for MFA. To learn more, review [Configure Push Notifications for MFA](https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-push-notifications-for-mfa).
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
+<dl>
+<dd>
+
 <dl>
 <dd>
 
-**p12:** `Optional<String>` 
-    
+```java
+client.guardian().factors().pushNotification().getSnsProvider();
+```
 </dd>
 </dl>
 </dd>
@@ -22562,7 +23514,7 @@ client.guardian().factors().pushNotification().setApnsProvider(
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.pushNotification.updateApnsProvider(request) -> UpdateGuardianFactorsProviderPushNotificationApnsResponseContent</code></summary>
+<details><summary><code>client.guardian.factors.pushNotification.setSnsProvider(request) -> SetGuardianFactorsProviderPushNotificationSnsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -22574,7 +23526,7 @@ client.guardian().factors().pushNotification().setApnsProvider(
 <dl>
 <dd>
 
-Modify configuration details of the multi-factor authentication APNS provider associated with your tenant.
+Configure the [AWS SNS push notification provider configuration](https://auth0.com/docs/multifactor-authentication/developer/sns-configuration) (subscription required).
 </dd>
 </dl>
 </dd>
@@ -22589,8 +23541,8 @@ Modify configuration details of the multi-factor authentication APNS provider as
 <dd>
 
 ```java
-client.guardian().factors().pushNotification().updateApnsProvider(
-    UpdateGuardianFactorsProviderPushNotificationApnsRequestContent
+client.guardian().factors().pushNotification().setSnsProvider(
+    SetGuardianFactorsProviderPushNotificationSnsRequestContent
         .builder()
         .build()
 );
@@ -22608,7 +23560,7 @@ client.guardian().factors().pushNotification().updateApnsProvider(
 <dl>
 <dd>
 
-**sandbox:** `Optional<Boolean>` 
+**awsAccessKeyId:** `Optional<String>` 
     
 </dd>
 </dl>
@@ -22616,7 +23568,7 @@ client.guardian().factors().pushNotification().updateApnsProvider(
 <dl>
 <dd>
 
-**bundleId:** `Optional<String>` 
+**awsSecretAccessKey:** `Optional<String>` 
     
 </dd>
 </dl>
@@ -22624,7 +23576,23 @@ client.guardian().factors().pushNotification().updateApnsProvider(
 <dl>
 <dd>
 
-**p12:** `Optional<String>` 
+**awsRegion:** `Optional<String>` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**snsApnsPlatformApplicationArn:** `Optional<String>` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**snsGcmPlatformApplicationArn:** `Optional<String>` 
     
 </dd>
 </dl>
@@ -22636,7 +23604,7 @@ client.guardian().factors().pushNotification().updateApnsProvider(
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.pushNotification.setFcmProvider(request) -> Map&amp;lt;String, Object&amp;gt;</code></summary>
+<details><summary><code>client.guardian.factors.pushNotification.updateSnsProvider(request) -> UpdateGuardianFactorsProviderPushNotificationSnsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -22648,7 +23616,7 @@ client.guardian().factors().pushNotification().updateApnsProvider(
 <dl>
 <dd>
 
-Overwrite all configuration details of the multi-factor authentication FCM provider associated with your tenant.
+Configure the [AWS SNS push notification provider configuration](https://auth0.com/docs/multifactor-authentication/developer/sns-configuration) (subscription required).
 </dd>
 </dl>
 </dd>
@@ -22663,8 +23631,8 @@ Overwrite all configuration details of the multi-factor authentication FCM provi
 <dd>
 
 ```java
-client.guardian().factors().pushNotification().setFcmProvider(
-    SetGuardianFactorsProviderPushNotificationFcmRequestContent
+client.guardian().factors().pushNotification().updateSnsProvider(
+    UpdateGuardianFactorsProviderPushNotificationSnsRequestContent
         .builder()
         .build()
 );
@@ -22682,65 +23650,39 @@ client.guardian().factors().pushNotification().setFcmProvider(
 <dl>
 <dd>
 
-**serverKey:** `Optional<String>` 
+**awsAccessKeyId:** `Optional<String>` 
     
 </dd>
 </dl>
-</dd>
-</dl>
 
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.guardian.factors.pushNotification.updateFcmProvider(request) -> Map&amp;lt;String, Object&amp;gt;</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
-
-<dl>
-<dd>
+**awsSecretAccessKey:** `Optional<String>` 
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
-Modify configuration details of the multi-factor authentication FCM provider associated with your tenant.
-</dd>
-</dl>
+**awsRegion:** `Optional<String>` 
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-```java
-client.guardian().factors().pushNotification().updateFcmProvider(
-    UpdateGuardianFactorsProviderPushNotificationFcmRequestContent
-        .builder()
-        .build()
-);
-```
-</dd>
-</dl>
+**snsApnsPlatformApplicationArn:** `Optional<String>` 
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-**serverKey:** `Optional<String>` 
+**snsGcmPlatformApplicationArn:** `Optional<String>` 
     
 </dd>
 </dl>
@@ -22752,7 +23694,7 @@ client.guardian().factors().pushNotification().updateFcmProvider(
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.pushNotification.setFcmv1Provider(request) -> Map&amp;lt;String, Object&amp;gt;</code></summary>
+<details><summary><code>client.guardian.factors.pushNotification.getSelectedProvider() -> GetGuardianFactorsProviderPushNotificationResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -22764,7 +23706,7 @@ client.guardian().factors().pushNotification().updateFcmProvider(
 <dl>
 <dd>
 
-Overwrite all configuration details of the multi-factor authentication FCMV1 provider associated with your tenant.
+Modify the push notification provider configured for your tenant. For more information, review <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-push-notifications-for-mfa">Configure Push Notifications for MFA</a>. 
 </dd>
 </dl>
 </dd>
@@ -22779,38 +23721,19 @@ Overwrite all configuration details of the multi-factor authentication FCMV1 pro
 <dd>
 
 ```java
-client.guardian().factors().pushNotification().setFcmv1Provider(
-    SetGuardianFactorsProviderPushNotificationFcmv1RequestContent
-        .builder()
-        .build()
-);
+client.guardian().factors().pushNotification().getSelectedProvider();
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**serverCredentials:** `Optional<String>` 
-    
-</dd>
-</dl>
-</dd>
-</dl>
-
 
 </dd>
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.pushNotification.updateFcmv1Provider(request) -> Map&amp;lt;String, Object&amp;gt;</code></summary>
+<details><summary><code>client.guardian.factors.pushNotification.setProvider(request) -> SetGuardianFactorsProviderPushNotificationResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -22822,7 +23745,7 @@ client.guardian().factors().pushNotification().setFcmv1Provider(
 <dl>
 <dd>
 
-Modify configuration details of the multi-factor authentication FCMV1 provider associated with your tenant.
+Modify the push notification provider configured for your tenant. For more information, review <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-push-notifications-for-mfa">Configure Push Notifications for MFA</a>. 
 </dd>
 </dl>
 </dd>
@@ -22837,9 +23760,10 @@ Modify configuration details of the multi-factor authentication FCMV1 provider a
 <dd>
 
 ```java
-client.guardian().factors().pushNotification().updateFcmv1Provider(
-    UpdateGuardianFactorsProviderPushNotificationFcmv1RequestContent
+client.guardian().factors().pushNotification().setProvider(
+    SetGuardianFactorsProviderPushNotificationRequestContent
         .builder()
+        .provider(GuardianFactorsProviderPushNotificationProviderDataEnum.GUARDIAN)
         .build()
 );
 ```
@@ -22856,7 +23780,7 @@ client.guardian().factors().pushNotification().updateFcmv1Provider(
 <dl>
 <dd>
 
-**serverCredentials:** `Optional<String>` 
+**provider:** `GuardianFactorsProviderPushNotificationProviderDataEnum` 
     
 </dd>
 </dl>
@@ -22868,7 +23792,8 @@ client.guardian().factors().pushNotification().updateFcmv1Provider(
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.pushNotification.getSnsProvider() -> GetGuardianFactorsProviderSnsResponseContent</code></summary>
+## Guardian Factors Sms
+<details><summary><code>client.guardian.factors.sms.getTwilioProvider() -> GetGuardianFactorsProviderSmsTwilioResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -22880,7 +23805,9 @@ client.guardian().factors().pushNotification().updateFcmv1Provider(
 <dl>
 <dd>
 
-Retrieve configuration details for an AWS SNS push notification provider that has been enabled for MFA. To learn more, review [Configure Push Notifications for MFA](https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-push-notifications-for-mfa).
+Retrieve the <a href="https://auth0.com/docs/multifactor-authentication/twilio-configuration">Twilio SMS provider configuration</a> (subscription required).
+
+    A new endpoint is available to retrieve the Twilio configuration related to phone factors (<a href='https://auth0.com/docs/api/management/v2/#!/Guardian/get_twilio'>phone Twilio configuration</a>). It has the same payload as this one. Please use it instead.
 </dd>
 </dl>
 </dd>
@@ -22895,7 +23822,7 @@ Retrieve configuration details for an AWS SNS push notification provider that ha
 <dd>
 
 ```java
-client.guardian().factors().pushNotification().getSnsProvider();
+client.guardian().factors().sms().getTwilioProvider();
 ```
 </dd>
 </dl>
@@ -22907,7 +23834,7 @@ client.guardian().factors().pushNotification().getSnsProvider();
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.pushNotification.setSnsProvider(request) -> SetGuardianFactorsProviderPushNotificationSnsResponseContent</code></summary>
+<details><summary><code>client.guardian.factors.sms.setTwilioProvider(request) -> SetGuardianFactorsProviderSmsTwilioResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -22919,7 +23846,9 @@ client.guardian().factors().pushNotification().getSnsProvider();
 <dl>
 <dd>
 
-Configure the [AWS SNS push notification provider configuration](https://auth0.com/docs/multifactor-authentication/developer/sns-configuration) (subscription required).
+This endpoint has been deprecated. To complete this action, use the <a href="https://auth0.com/docs/api/management/v2/guardian/put-twilio">Update Twilio phone configuration</a> endpoint.
+
+    <b>Previous functionality</b>: Update the Twilio SMS provider configuration.
 </dd>
 </dl>
 </dd>
@@ -22934,8 +23863,8 @@ Configure the [AWS SNS push notification provider configuration](https://auth0.c
 <dd>
 
 ```java
-client.guardian().factors().pushNotification().setSnsProvider(
-    SetGuardianFactorsProviderPushNotificationSnsRequestContent
+client.guardian().factors().sms().setTwilioProvider(
+    SetGuardianFactorsProviderSmsTwilioRequestContent
         .builder()
         .build()
 );
@@ -22953,15 +23882,7 @@ client.guardian().factors().pushNotification().setSnsProvider(
 <dl>
 <dd>
 
-**awsAccessKeyId:** `Optional<String>` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**awsSecretAccessKey:** `Optional<String>` 
+**from:** `Optional<String>` — From number
     
 </dd>
 </dl>
@@ -22969,7 +23890,7 @@ client.guardian().factors().pushNotification().setSnsProvider(
 <dl>
 <dd>
 
-**awsRegion:** `Optional<String>` 
+**messagingServiceSid:** `Optional<String>` — Copilot SID
     
 </dd>
 </dl>
@@ -22977,7 +23898,7 @@ client.guardian().factors().pushNotification().setSnsProvider(
 <dl>
 <dd>
 
-**snsApnsPlatformApplicationArn:** `Optional<String>` 
+**authToken:** `Optional<String>` — Twilio Authentication token
     
 </dd>
 </dl>
@@ -22985,7 +23906,7 @@ client.guardian().factors().pushNotification().setSnsProvider(
 <dl>
 <dd>
 
-**snsGcmPlatformApplicationArn:** `Optional<String>` 
+**sid:** `Optional<String>` — Twilio SID
     
 </dd>
 </dl>
@@ -22997,7 +23918,7 @@ client.guardian().factors().pushNotification().setSnsProvider(
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.pushNotification.updateSnsProvider(request) -> UpdateGuardianFactorsProviderPushNotificationSnsResponseContent</code></summary>
+<details><summary><code>client.guardian.factors.sms.getSelectedProvider() -> GetGuardianFactorsProviderSmsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -23009,7 +23930,9 @@ client.guardian().factors().pushNotification().setSnsProvider(
 <dl>
 <dd>
 
-Configure the [AWS SNS push notification provider configuration](https://auth0.com/docs/multifactor-authentication/developer/sns-configuration) (subscription required).
+This endpoint has been deprecated. To complete this action, use the <a href="https://auth0.com/docs/api/management/v2/guardian/get-phone-providers">Retrieve phone configuration</a> endpoint instead.
+
+    <b>Previous functionality</b>: Retrieve details for the multi-factor authentication SMS provider configured for your tenant.
 </dd>
 </dl>
 </dd>
@@ -23024,58 +23947,68 @@ Configure the [AWS SNS push notification provider configuration](https://auth0.c
 <dd>
 
 ```java
-client.guardian().factors().pushNotification().updateSnsProvider(
-    UpdateGuardianFactorsProviderPushNotificationSnsRequestContent
-        .builder()
-        .build()
-);
+client.guardian().factors().sms().getSelectedProvider();
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
 
+</dd>
+</dl>
+</details>
+
+<details><summary><code>client.guardian.factors.sms.setProvider(request) -> SetGuardianFactorsProviderSmsResponseContent</code></summary>
 <dl>
 <dd>
 
+#### 📝 Description
+
 <dl>
 <dd>
 
-**awsAccessKeyId:** `Optional<String>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**awsSecretAccessKey:** `Optional<String>` 
-    
+This endpoint has been deprecated. To complete this action, use the <a href="https://auth0.com/docs/api/management/v2/guardian/put-phone-providers">Update phone configuration</a> endpoint instead.
+
+    <b>Previous functionality</b>: Update the multi-factor authentication SMS provider configuration in your tenant.
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### 🔌 Usage
+
 <dl>
 <dd>
 
-**awsRegion:** `Optional<String>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**snsApnsPlatformApplicationArn:** `Optional<String>` 
-    
+```java
+client.guardian().factors().sms().setProvider(
+    SetGuardianFactorsProviderSmsRequestContent
+        .builder()
+        .provider(GuardianFactorsProviderSmsProviderEnum.AUTH0)
+        .build()
+);
+```
+</dd>
+</dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
 <dl>
 <dd>
 
-**snsGcmPlatformApplicationArn:** `Optional<String>` 
+<dl>
+<dd>
+
+**provider:** `GuardianFactorsProviderSmsProviderEnum` 
     
 </dd>
 </dl>
@@ -23087,7 +24020,7 @@ client.guardian().factors().pushNotification().updateSnsProvider(
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.pushNotification.getSelectedProvider() -> GetGuardianFactorsProviderPushNotificationResponseContent</code></summary>
+<details><summary><code>client.guardian.factors.sms.getTemplates() -> Optional&amp;lt;GetGuardianFactorSmsTemplatesResponseContent&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -23099,7 +24032,9 @@ client.guardian().factors().pushNotification().updateSnsProvider(
 <dl>
 <dd>
 
-Modify the push notification provider configured for your tenant. For more information, review <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-push-notifications-for-mfa">Configure Push Notifications for MFA</a>. 
+This endpoint has been deprecated. To complete this action, use the <a href="https://auth0.com/docs/api/management/v2/guardian/get-factor-phone-templates">Retrieve enrollment and verification phone templates</a> endpoint instead.
+
+    <b>Previous function</b>: Retrieve details of SMS enrollment and verification templates configured for your tenant.
 </dd>
 </dl>
 </dd>
@@ -23114,7 +24049,7 @@ Modify the push notification provider configured for your tenant. For more infor
 <dd>
 
 ```java
-client.guardian().factors().pushNotification().getSelectedProvider();
+client.guardian().factors().sms().getTemplates();
 ```
 </dd>
 </dl>
@@ -23126,7 +24061,7 @@ client.guardian().factors().pushNotification().getSelectedProvider();
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.pushNotification.setProvider(request) -> SetGuardianFactorsProviderPushNotificationResponseContent</code></summary>
+<details><summary><code>client.guardian.factors.sms.setTemplates(request) -> SetGuardianFactorSmsTemplatesResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -23138,7 +24073,9 @@ client.guardian().factors().pushNotification().getSelectedProvider();
 <dl>
 <dd>
 
-Modify the push notification provider configured for your tenant. For more information, review <a href="https://auth0.com/docs/secure/multi-factor-authentication/multi-factor-authentication-factors/configure-push-notifications-for-mfa">Configure Push Notifications for MFA</a>. 
+This endpoint has been deprecated. To complete this action, use the <a href="https://auth0.com/docs/api/management/v2/guardian/put-factor-phone-templates">Update enrollment and verification phone templates</a> endpoint instead.
+
+    <b>Previous functionality</b>: Customize the messages sent to complete SMS enrollment and verification.
 </dd>
 </dl>
 </dd>
@@ -23153,10 +24090,11 @@ Modify the push notification provider configured for your tenant. For more infor
 <dd>
 
 ```java
-client.guardian().factors().pushNotification().setProvider(
-    SetGuardianFactorsProviderPushNotificationRequestContent
+client.guardian().factors().sms().setTemplates(
+    SetGuardianFactorSmsTemplatesRequestContent
         .builder()
-        .provider(GuardianFactorsProviderPushNotificationProviderDataEnum.GUARDIAN)
+        .enrollmentMessage("enrollment_message")
+        .verificationMessage("verification_message")
         .build()
 );
 ```
@@ -23173,7 +24111,15 @@ client.guardian().factors().pushNotification().setProvider(
 <dl>
 <dd>
 
-**provider:** `GuardianFactorsProviderPushNotificationProviderDataEnum` 
+**enrollmentMessage:** `String` — Message sent to the user when they are invited to enroll with a phone number.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**verificationMessage:** `String` — Message sent to the user when they are prompted to verify their account.
     
 </dd>
 </dl>
@@ -23185,8 +24131,8 @@ client.guardian().factors().pushNotification().setProvider(
 </dl>
 </details>
 
-## Guardian Factors Sms
-<details><summary><code>client.guardian.factors.sms.getTwilioProvider() -> GetGuardianFactorsProviderSmsTwilioResponseContent</code></summary>
+## Guardian Factors Duo Settings
+<details><summary><code>client.guardian.factors.duo.settings.get() -> GetGuardianFactorDuoSettingsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -23198,9 +24144,7 @@ client.guardian().factors().pushNotification().setProvider(
 <dl>
 <dd>
 
-Retrieve the <a href="https://auth0.com/docs/multifactor-authentication/twilio-configuration">Twilio SMS provider configuration</a> (subscription required).
-
-    A new endpoint is available to retrieve the Twilio configuration related to phone factors (<a href='https://auth0.com/docs/api/management/v2/#!/Guardian/get_twilio'>phone Twilio configuration</a>). It has the same payload as this one. Please use it instead.
+Retrieves the DUO account and factor configuration.
 </dd>
 </dl>
 </dd>
@@ -23215,7 +24159,7 @@ Retrieve the <a href="https://auth0.com/docs/multifactor-authentication/twilio-c
 <dd>
 
 ```java
-client.guardian().factors().sms().getTwilioProvider();
+client.guardian().factors().duo().settings().get();
 ```
 </dd>
 </dl>
@@ -23227,7 +24171,7 @@ client.guardian().factors().sms().getTwilioProvider();
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.sms.setTwilioProvider(request) -> SetGuardianFactorsProviderSmsTwilioResponseContent</code></summary>
+<details><summary><code>client.guardian.factors.duo.settings.set(request) -> SetGuardianFactorDuoSettingsResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -23239,9 +24183,7 @@ client.guardian().factors().sms().getTwilioProvider();
 <dl>
 <dd>
 
-This endpoint has been deprecated. To complete this action, use the <a href="https://auth0.com/docs/api/management/v2/guardian/put-twilio">Update Twilio phone configuration</a> endpoint.
-
-    <b>Previous functionality</b>: Update the Twilio SMS provider configuration.
+Set the DUO account configuration and other properties specific to this factor.
 </dd>
 </dl>
 </dd>
@@ -23256,8 +24198,8 @@ This endpoint has been deprecated. To complete this action, use the <a href="htt
 <dd>
 
 ```java
-client.guardian().factors().sms().setTwilioProvider(
-    SetGuardianFactorsProviderSmsTwilioRequestContent
+client.guardian().factors().duo().settings().set(
+    SetGuardianFactorDuoSettingsRequestContent
         .builder()
         .build()
 );
@@ -23275,15 +24217,7 @@ client.guardian().factors().sms().setTwilioProvider(
 <dl>
 <dd>
 
-**from:** `Optional<String>` — From number
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**messagingServiceSid:** `Optional<String>` — Copilot SID
+**ikey:** `Optional<String>` 
     
 </dd>
 </dl>
@@ -23291,7 +24225,7 @@ client.guardian().factors().sms().setTwilioProvider(
 <dl>
 <dd>
 
-**authToken:** `Optional<String>` — Twilio Authentication token
+**skey:** `Optional<String>` 
     
 </dd>
 </dl>
@@ -23299,7 +24233,7 @@ client.guardian().factors().sms().setTwilioProvider(
 <dl>
 <dd>
 
-**sid:** `Optional<String>` — Twilio SID
+**host:** `Optional<String>` 
     
 </dd>
 </dl>
@@ -23311,11 +24245,11 @@ client.guardian().factors().sms().setTwilioProvider(
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.sms.getSelectedProvider() -> GetGuardianFactorsProviderSmsResponseContent</code></summary>
+<details><summary><code>client.guardian.factors.duo.settings.update(request) -> UpdateGuardianFactorDuoSettingsResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -23323,15 +24257,19 @@ client.guardian().factors().sms().setTwilioProvider(
 <dl>
 <dd>
 
-This endpoint has been deprecated. To complete this action, use the <a href="https://auth0.com/docs/api/management/v2/guardian/get-phone-providers">Retrieve phone configuration</a> endpoint instead.
-
-    <b>Previous functionality</b>: Retrieve details for the multi-factor authentication SMS provider configured for your tenant.
+```java
+client.guardian().factors().duo().settings().update(
+    UpdateGuardianFactorDuoSettingsRequestContent
+        .builder()
+        .build()
+);
+```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -23339,9 +24277,24 @@ This endpoint has been deprecated. To complete this action, use the <a href="htt
 <dl>
 <dd>
 
-```java
-client.guardian().factors().sms().getSelectedProvider();
-```
+**ikey:** `Optional<String>` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**skey:** `Optional<String>` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**host:** `Optional<String>` 
+    
 </dd>
 </dl>
 </dd>
@@ -23352,7 +24305,8 @@ client.guardian().factors().sms().getSelectedProvider();
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.sms.setProvider(request) -> SetGuardianFactorsProviderSmsResponseContent</code></summary>
+## Hooks Secrets
+<details><summary><code>client.hooks.secrets.get(id) -> Map&amp;lt;String, String&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -23364,9 +24318,7 @@ client.guardian().factors().sms().getSelectedProvider();
 <dl>
 <dd>
 
-This endpoint has been deprecated. To complete this action, use the <a href="https://auth0.com/docs/api/management/v2/guardian/put-phone-providers">Update phone configuration</a> endpoint instead.
-
-    <b>Previous functionality</b>: Update the multi-factor authentication SMS provider configuration in your tenant.
+Retrieve a hook's secrets by the ID of the hook.
 </dd>
 </dl>
 </dd>
@@ -23381,12 +24333,7 @@ This endpoint has been deprecated. To complete this action, use the <a href="htt
 <dd>
 
 ```java
-client.guardian().factors().sms().setProvider(
-    SetGuardianFactorsProviderSmsRequestContent
-        .builder()
-        .provider(GuardianFactorsProviderSmsProviderEnum.AUTH0)
-        .build()
-);
+client.hooks().secrets().get("id");
 ```
 </dd>
 </dl>
@@ -23401,7 +24348,7 @@ client.guardian().factors().sms().setProvider(
 <dl>
 <dd>
 
-**provider:** `GuardianFactorsProviderSmsProviderEnum` 
+**id:** `String` — ID of the hook to retrieve secrets from.
     
 </dd>
 </dl>
@@ -23413,7 +24360,7 @@ client.guardian().factors().sms().setProvider(
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.sms.getTemplates() -> Optional&amp;lt;GetGuardianFactorSmsTemplatesResponseContent&amp;gt;</code></summary>
+<details><summary><code>client.hooks.secrets.create(id, request)</code></summary>
 <dl>
 <dd>
 
@@ -23425,9 +24372,7 @@ client.guardian().factors().sms().setProvider(
 <dl>
 <dd>
 
-This endpoint has been deprecated. To complete this action, use the <a href="https://auth0.com/docs/api/management/v2/guardian/get-factor-phone-templates">Retrieve enrollment and verification phone templates</a> endpoint instead.
-
-    <b>Previous function</b>: Retrieve details of SMS enrollment and verification templates configured for your tenant.
+Add one or more secrets to an existing hook. Accepts an object of key-value pairs, where the key is the name of the secret. A hook can have a maximum of 20 secrets.
 </dd>
 </dl>
 </dd>
@@ -23442,19 +24387,47 @@ This endpoint has been deprecated. To complete this action, use the <a href="htt
 <dd>
 
 ```java
-client.guardian().factors().sms().getTemplates();
+client.hooks().secrets().create(
+    "id",
+    new HashMap<String, String>() {{
+        put("key", "value");
+    }}
+);
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**id:** `String` — The id of the hook to retrieve
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**request:** `Map<String, String>` 
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
 
 </dd>
 </dl>
 </details>
 
-<details><summary><code>client.guardian.factors.sms.setTemplates(request) -> SetGuardianFactorSmsTemplatesResponseContent</code></summary>
+<details><summary><code>client.hooks.secrets.delete(id, request)</code></summary>
 <dl>
 <dd>
 
@@ -23466,9 +24439,7 @@ client.guardian().factors().sms().getTemplates();
 <dl>
 <dd>
 
-This endpoint has been deprecated. To complete this action, use the <a href="https://auth0.com/docs/api/management/v2/guardian/put-factor-phone-templates">Update enrollment and verification phone templates</a> endpoint instead.
-
-    <b>Previous functionality</b>: Customize the messages sent to complete SMS enrollment and verification.
+Delete one or more existing secrets for a given hook. Accepts an array of secret names to delete.
 </dd>
 </dl>
 </dd>
@@ -23483,12 +24454,9 @@ This endpoint has been deprecated. To complete this action, use the <a href="htt
 <dd>
 
 ```java
-client.guardian().factors().sms().setTemplates(
-    SetGuardianFactorSmsTemplatesRequestContent
-        .builder()
-        .enrollmentMessage("enrollment_message")
-        .verificationMessage("verification_message")
-        .build()
+client.hooks().secrets().delete(
+    "id",
+    Arrays.asList("string")
 );
 ```
 </dd>
@@ -23504,7 +24472,7 @@ client.guardian().factors().sms().setTemplates(
 <dl>
 <dd>
 
-**enrollmentMessage:** `String` — Message sent to the user when they are invited to enroll with a phone number.
+**id:** `String` — ID of the hook whose secrets to delete.
     
 </dd>
 </dl>
@@ -23512,7 +24480,7 @@ client.guardian().factors().sms().setTemplates(
 <dl>
 <dd>
 
-**verificationMessage:** `String` — Message sent to the user when they are prompted to verify their account.
+**request:** `List<String>` 
     
 </dd>
 </dl>
@@ -23524,8 +24492,7 @@ client.guardian().factors().sms().setTemplates(
 </dl>
 </details>
 
-## Guardian Factors Duo Settings
-<details><summary><code>client.guardian.factors.duo.settings.get() -> GetGuardianFactorDuoSettingsResponseContent</code></summary>
+<details><summary><code>client.hooks.secrets.update(id, request)</code></summary>
 <dl>
 <dd>
 
@@ -23537,7 +24504,7 @@ client.guardian().factors().sms().setTemplates(
 <dl>
 <dd>
 
-Retrieves the DUO account and factor configuration.
+Update one or more existing secrets for an existing hook. Accepts an object of key-value pairs, where the key is the name of the existing secret.
 </dd>
 </dl>
 </dd>
@@ -23552,23 +24519,19 @@ Retrieves the DUO account and factor configuration.
 <dd>
 
 ```java
-client.guardian().factors().duo().settings().get();
+client.hooks().secrets().update(
+    "id",
+    new HashMap<String, String>() {{
+        put("key", "value");
+    }}
+);
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-
-</dd>
-</dl>
-</details>
-
-<details><summary><code>client.guardian.factors.duo.settings.set(request) -> SetGuardianFactorDuoSettingsResponseContent</code></summary>
-<dl>
-<dd>
-
-#### 📝 Description
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -23576,71 +24539,44 @@ client.guardian().factors().duo().settings().get();
 <dl>
 <dd>
 
-Set the DUO account configuration and other properties specific to this factor.
-</dd>
-</dl>
+**id:** `String` — ID of the hook whose secrets to update.
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-```java
-client.guardian().factors().duo().settings().set(
-    SetGuardianFactorDuoSettingsRequestContent
-        .builder()
-        .build()
-);
-```
+**request:** `Map<String, String>` 
+    
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
 
-<dl>
-<dd>
+</dd>
+</dl>
+</details>
 
+## Jobs UsersExports
+<details><summary><code>client.jobs.usersExports.create(request) -> CreateExportUsersResponseContent</code></summary>
 <dl>
 <dd>
 
-**ikey:** `Optional<String>` 
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**skey:** `Optional<String>` 
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**host:** `Optional<String>` 
-    
-</dd>
-</dl>
+Export all users to a file via a long-running job.
 </dd>
 </dl>
-
-
 </dd>
 </dl>
-</details>
-
-<details><summary><code>client.guardian.factors.duo.settings.update(request) -> UpdateGuardianFactorDuoSettingsResponseContent</code></summary>
-<dl>
-<dd>
 
 #### 🔌 Usage
 
@@ -23651,8 +24587,8 @@ client.guardian().factors().duo().settings().set(
 <dd>
 
 ```java
-client.guardian().factors().duo().settings().update(
-    UpdateGuardianFactorDuoSettingsRequestContent
+client.jobs().usersExports().create(
+    CreateExportUsersRequestContent
         .builder()
         .build()
 );
@@ -23670,7 +24606,7 @@ client.guardian().factors().duo().settings().update(
 <dl>
 <dd>
 
-**ikey:** `Optional<String>` 
+**connectionId:** `Optional<String>` — connection_id of the connection from which users will be exported.
     
 </dd>
 </dl>
@@ -23678,7 +24614,7 @@ client.guardian().factors().duo().settings().update(
 <dl>
 <dd>
 
-**skey:** `Optional<String>` 
+**format:** `Optional<JobFileFormatEnum>` 
     
 </dd>
 </dl>
@@ -23686,7 +24622,15 @@ client.guardian().factors().duo().settings().update(
 <dl>
 <dd>
 
-**host:** `Optional<String>` 
+**limit:** `Optional<Integer>` — Limit the number of records.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**fields:** `Optional<List<CreateExportUsersFields>>` — List of fields to be included in the CSV. Defaults to a predefined set of fields.
     
 </dd>
 </dl>
@@ -23698,8 +24642,8 @@ client.guardian().factors().duo().settings().update(
 </dl>
 </details>
 
-## Hooks Secrets
-<details><summary><code>client.hooks.secrets.get(id) -> Map&amp;lt;String, String&amp;gt;</code></summary>
+## Jobs UsersImports
+<details><summary><code>client.jobs.usersImports.create(request) -> CreateImportUsersResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -23711,7 +24655,7 @@ client.guardian().factors().duo().settings().update(
 <dl>
 <dd>
 
-Retrieve a hook's secrets by the ID of the hook.
+Import users from a <a href="https://auth0.com/docs/users/references/bulk-import-database-schema-examples">formatted file</a> into a connection via a long-running job. When importing users, with or without upsert, the `email_verified` is set to `false` when the email address is added or updated. Users must verify their email address. To avoid this behavior, set `email_verified` to `true` in the imported data.
 </dd>
 </dl>
 </dd>
@@ -23726,34 +24670,26 @@ Retrieve a hook's secrets by the ID of the hook.
 <dd>
 
 ```java
-client.hooks().secrets().get("id");
+client.jobs().usersImports().create(
+    null,
+    CreateImportUsersRequestContent
+        .builder()
+        .connectionId("connection_id")
+        .build()
+);
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**id:** `String` — ID of the hook to retrieve secrets from.
-    
-</dd>
-</dl>
-</dd>
-</dl>
-
 
 </dd>
 </dl>
 </details>
 
-<details><summary><code>client.hooks.secrets.create(id, request)</code></summary>
+## Jobs VerificationEmail
+<details><summary><code>client.jobs.verificationEmail.create(request) -> CreateVerificationEmailResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -23765,7 +24701,9 @@ client.hooks().secrets().get("id");
 <dl>
 <dd>
 
-Add one or more secrets to an existing hook. Accepts an object of key-value pairs, where the key is the name of the secret. A hook can have a maximum of 20 secrets.
+Send an email to the specified user that asks them to click a link to [verify their email address](https://auth0.com/docs/email/custom#verification-email).
+
+Note: You must have the `Status` toggle enabled for the verification email template for the email to be sent.
 </dd>
 </dl>
 </dd>
@@ -23780,11 +24718,11 @@ Add one or more secrets to an existing hook. Accepts an object of key-value pair
 <dd>
 
 ```java
-client.hooks().secrets().create(
-    "id",
-    new HashMap<String, String>() {{
-        put("key", "value");
-    }}
+client.jobs().verificationEmail().create(
+    CreateVerificationEmailRequestContent
+        .builder()
+        .userId("user_id")
+        .build()
 );
 ```
 </dd>
@@ -23800,7 +24738,7 @@ client.hooks().secrets().create(
 <dl>
 <dd>
 
-**id:** `String` — The id of the hook to retrieve
+**userId:** `String` — user_id of the user to send the verification email to.
     
 </dd>
 </dl>
@@ -23808,7 +24746,23 @@ client.hooks().secrets().create(
 <dl>
 <dd>
 
-**request:** `Map<String, String>` 
+**clientId:** `Optional<String>` — client_id of the client (application). If no value provided, the global Client ID will be used.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**identity:** `Optional<Identity>` 
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**organizationId:** `Optional<String>` — (Optional) Organization ID – the ID of the Organization. If provided, organization parameters will be made available to the email template and organization branding will be applied to the prompt. In addition, the redirect link in the prompt will include organization_id and organization_name query string parameters.
     
 </dd>
 </dl>
@@ -23820,7 +24774,8 @@ client.hooks().secrets().create(
 </dl>
 </details>
 
-<details><summary><code>client.hooks.secrets.delete(id, request)</code></summary>
+## Jobs Errors
+<details><summary><code>client.jobs.errors.get(id) -> Optional&amp;lt;ErrorsGetResponse&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -23832,7 +24787,7 @@ client.hooks().secrets().create(
 <dl>
 <dd>
 
-Delete one or more existing secrets for a given hook. Accepts an array of secret names to delete.
+Retrieve error details of a failed job.
 </dd>
 </dl>
 </dd>
@@ -23847,10 +24802,7 @@ Delete one or more existing secrets for a given hook. Accepts an array of secret
 <dd>
 
 ```java
-client.hooks().secrets().delete(
-    "id",
-    Arrays.asList("string")
-);
+client.jobs().errors().get("id");
 ```
 </dd>
 </dl>
@@ -23865,15 +24817,7 @@ client.hooks().secrets().delete(
 <dl>
 <dd>
 
-**id:** `String` — ID of the hook whose secrets to delete.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**request:** `List<String>` 
+**id:** `String` — ID of the job.
     
 </dd>
 </dl>
@@ -23885,7 +24829,8 @@ client.hooks().secrets().delete(
 </dl>
 </details>
 
-<details><summary><code>client.hooks.secrets.update(id, request)</code></summary>
+## Keys CustomSigning
+<details><summary><code>client.keys.customSigning.get() -> GetCustomSigningKeysResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -23897,7 +24842,7 @@ client.hooks().secrets().delete(
 <dl>
 <dd>
 
-Update one or more existing secrets for an existing hook. Accepts an object of key-value pairs, where the key is the name of the existing secret.
+Get entire jwks representation of custom signing keys.
 </dd>
 </dl>
 </dd>
@@ -23912,48 +24857,19 @@ Update one or more existing secrets for an existing hook. Accepts an object of k
 <dd>
 
 ```java
-client.hooks().secrets().update(
-    "id",
-    new HashMap<String, String>() {{
-        put("key", "value");
-    }}
-);
+client.keys().customSigning().get();
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**id:** `String` — ID of the hook whose secrets to update.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**request:** `Map<String, String>` 
-    
-</dd>
-</dl>
-</dd>
-</dl>
-
 
 </dd>
 </dl>
 </details>
 
-## Jobs UsersExports
-<details><summary><code>client.jobs.usersExports.create(request) -> CreateExportUsersResponseContent</code></summary>
+<details><summary><code>client.keys.customSigning.set(request) -> SetCustomSigningKeysResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -23965,7 +24881,7 @@ client.hooks().secrets().update(
 <dl>
 <dd>
 
-Export all users to a file via a long-running job.
+Create or replace entire jwks representation of custom signing keys.
 </dd>
 </dl>
 </dd>
@@ -23980,9 +24896,17 @@ Export all users to a file via a long-running job.
 <dd>
 
 ```java
-client.jobs().usersExports().create(
-    CreateExportUsersRequestContent
+client.keys().customSigning().set(
+    SetCustomSigningKeysRequestContent
         .builder()
+        .keys(
+            Arrays.asList(
+                CustomSigningKeyJwk
+                    .builder()
+                    .kty(CustomSigningKeyTypeEnum.EC)
+                    .build()
+            )
+        )
         .build()
 );
 ```
@@ -23999,31 +24923,7 @@ client.jobs().usersExports().create(
 <dl>
 <dd>
 
-**connectionId:** `Optional<String>` — connection_id of the connection from which users will be exported.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**format:** `Optional<JobFileFormatEnum>` 
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**limit:** `Optional<Integer>` — Limit the number of records.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**fields:** `Optional<List<CreateExportUsersFields>>` — List of fields to be included in the CSV. Defaults to a predefined set of fields.
+**keys:** `List<CustomSigningKeyJwk>` — An array of custom public signing keys.
     
 </dd>
 </dl>
@@ -24035,8 +24935,7 @@ client.jobs().usersExports().create(
 </dl>
 </details>
 
-## Jobs UsersImports
-<details><summary><code>client.jobs.usersImports.create(request) -> CreateImportUsersResponseContent</code></summary>
+<details><summary><code>client.keys.customSigning.delete()</code></summary>
 <dl>
 <dd>
 
@@ -24048,7 +24947,7 @@ client.jobs().usersExports().create(
 <dl>
 <dd>
 
-Import users from a <a href="https://auth0.com/docs/users/references/bulk-import-database-schema-examples">formatted file</a> into a connection via a long-running job. When importing users, with or without upsert, the `email_verified` is set to `false` when the email address is added or updated. Users must verify their email address. To avoid this behavior, set `email_verified` to `true` in the imported data.
+Delete entire jwks representation of custom signing keys.
 </dd>
 </dl>
 </dd>
@@ -24063,13 +24962,7 @@ Import users from a <a href="https://auth0.com/docs/users/references/bulk-import
 <dd>
 
 ```java
-client.jobs().usersImports().create(
-    null,
-    CreateImportUsersRequestContent
-        .builder()
-        .connectionId("connection_id")
-        .build()
-);
+client.keys().customSigning().delete();
 ```
 </dd>
 </dl>
@@ -24081,8 +24974,8 @@ client.jobs().usersImports().create(
 </dl>
 </details>
 
-## Jobs VerificationEmail
-<details><summary><code>client.jobs.verificationEmail.create(request) -> CreateVerificationEmailResponseContent</code></summary>
+## Keys Encryption
+<details><summary><code>client.keys.encryption.list() -> SyncPagingIterable&amp;lt;EncryptionKey&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -24094,9 +24987,7 @@ client.jobs().usersImports().create(
 <dl>
 <dd>
 
-Send an email to the specified user that asks them to click a link to [verify their email address](https://auth0.com/docs/email/custom#verification-email).
-
-Note: You must have the `Status` toggle enabled for the verification email template for the email to be sent.
+Retrieve details of all the encryption keys associated with your tenant.
 </dd>
 </dl>
 </dd>
@@ -24111,10 +25002,12 @@ Note: You must have the `Status` toggle enabled for the verification email templ
 <dd>
 
 ```java
-client.jobs().verificationEmail().create(
-    CreateVerificationEmailRequestContent
+client.keys().encryption().list(
+    ListEncryptionKeysRequestParameters
         .builder()
-        .userId("user_id")
+        .page(1)
+        .perPage(1)
+        .includeTotals(true)
         .build()
 );
 ```
@@ -24131,15 +25024,7 @@ client.jobs().verificationEmail().create(
 <dl>
 <dd>
 
-**userId:** `String` — user_id of the user to send the verification email to.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**clientId:** `Optional<String>` — client_id of the client (application). If no value provided, the global Client ID will be used.
+**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
     
 </dd>
 </dl>
@@ -24147,7 +25032,7 @@ client.jobs().verificationEmail().create(
 <dl>
 <dd>
 
-**identity:** `Optional<Identity>` 
+**perPage:** `Optional<Integer>` — Number of results per page. Default value is 50, maximum value is 100.
     
 </dd>
 </dl>
@@ -24155,7 +25040,7 @@ client.jobs().verificationEmail().create(
 <dl>
 <dd>
 
-**organizationId:** `Optional<String>` — (Optional) Organization ID – the ID of the Organization. If provided, organization parameters will be made available to the email template and organization branding will be applied to the prompt. In addition, the redirect link in the prompt will include organization_id and organization_name query string parameters.
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
     
 </dd>
 </dl>
@@ -24167,8 +25052,7 @@ client.jobs().verificationEmail().create(
 </dl>
 </details>
 
-## Jobs Errors
-<details><summary><code>client.jobs.errors.get(id) -> Optional&amp;lt;ErrorsGetResponse&amp;gt;</code></summary>
+<details><summary><code>client.keys.encryption.create(request) -> CreateEncryptionKeyResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -24180,7 +25064,7 @@ client.jobs().verificationEmail().create(
 <dl>
 <dd>
 
-Retrieve error details of a failed job.
+Create the new, pre-activated encryption key, without the key material.
 </dd>
 </dl>
 </dd>
@@ -24195,7 +25079,12 @@ Retrieve error details of a failed job.
 <dd>
 
 ```java
-client.jobs().errors().get("id");
+client.keys().encryption().create(
+    CreateEncryptionKeyRequestContent
+        .builder()
+        .type(CreateEncryptionKeyType.CUSTOMER_PROVIDED_ROOT_KEY)
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -24210,7 +25099,7 @@ client.jobs().errors().get("id");
 <dl>
 <dd>
 
-**id:** `String` — ID of the job.
+**type:** `CreateEncryptionKeyType` 
     
 </dd>
 </dl>
@@ -24222,8 +25111,7 @@ client.jobs().errors().get("id");
 </dl>
 </details>
 
-## Keys CustomSigning
-<details><summary><code>client.keys.customSigning.get() -> GetCustomSigningKeysResponseContent</code></summary>
+<details><summary><code>client.keys.encryption.rekey()</code></summary>
 <dl>
 <dd>
 
@@ -24235,7 +25123,7 @@ client.jobs().errors().get("id");
 <dl>
 <dd>
 
-Get entire jwks representation of custom signing keys.
+Perform rekeying operation on the key hierarchy.
 </dd>
 </dl>
 </dd>
@@ -24250,7 +25138,7 @@ Get entire jwks representation of custom signing keys.
 <dd>
 
 ```java
-client.keys().customSigning().get();
+client.keys().encryption().rekey();
 ```
 </dd>
 </dl>
@@ -24262,7 +25150,7 @@ client.keys().customSigning().get();
 </dl>
 </details>
 
-<details><summary><code>client.keys.customSigning.set(request) -> SetCustomSigningKeysResponseContent</code></summary>
+<details><summary><code>client.keys.encryption.get(kid) -> GetEncryptionKeyResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -24274,7 +25162,7 @@ client.keys().customSigning().get();
 <dl>
 <dd>
 
-Create or replace entire jwks representation of custom signing keys.
+Retrieve details of the encryption key with the given ID.
 </dd>
 </dl>
 </dd>
@@ -24289,19 +25177,7 @@ Create or replace entire jwks representation of custom signing keys.
 <dd>
 
 ```java
-client.keys().customSigning().set(
-    SetCustomSigningKeysRequestContent
-        .builder()
-        .keys(
-            Arrays.asList(
-                CustomSigningKeyJwk
-                    .builder()
-                    .kty(CustomSigningKeyTypeEnum.EC)
-                    .build()
-            )
-        )
-        .build()
-);
+client.keys().encryption().get("kid");
 ```
 </dd>
 </dl>
@@ -24316,7 +25192,7 @@ client.keys().customSigning().set(
 <dl>
 <dd>
 
-**keys:** `List<CustomSigningKeyJwk>` — An array of custom public signing keys.
+**kid:** `String` — Encryption key ID
     
 </dd>
 </dl>
@@ -24328,7 +25204,7 @@ client.keys().customSigning().set(
 </dl>
 </details>
 
-<details><summary><code>client.keys.customSigning.delete()</code></summary>
+<details><summary><code>client.keys.encryption.import_(kid, request) -> ImportEncryptionKeyResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -24340,23 +25216,52 @@ client.keys().customSigning().set(
 <dl>
 <dd>
 
-Delete entire jwks representation of custom signing keys.
-</dd>
-</dl>
+Import wrapped key material and activate encryption key.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.keys().encryption().import_(
+    "kid",
+    ImportEncryptionKeyRequestContent
+        .builder()
+        .wrappedKey("wrapped_key")
+        .build()
+);
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**kid:** `String` — Encryption key ID
+    
 </dd>
 </dl>
 
-#### 🔌 Usage
-
-<dl>
-<dd>
-
 <dl>
 <dd>
 
-```java
-client.keys().customSigning().delete();
-```
+**wrappedKey:** `String` — Base64 encoded ciphertext of key material wrapped by public wrapping key.
+    
 </dd>
 </dl>
 </dd>
@@ -24367,8 +25272,7 @@ client.keys().customSigning().delete();
 </dl>
 </details>
 
-## Keys Encryption
-<details><summary><code>client.keys.encryption.list() -> SyncPagingIterable&amp;lt;EncryptionKey&amp;gt;</code></summary>
+<details><summary><code>client.keys.encryption.delete(kid)</code></summary>
 <dl>
 <dd>
 
@@ -24380,7 +25284,7 @@ client.keys().customSigning().delete();
 <dl>
 <dd>
 
-Retrieve details of all the encryption keys associated with your tenant.
+Delete the custom provided encryption key with the given ID and move back to using native encryption key.
 </dd>
 </dl>
 </dd>
@@ -24395,14 +25299,7 @@ Retrieve details of all the encryption keys associated with your tenant.
 <dd>
 
 ```java
-client.keys().encryption().list(
-    ListEncryptionKeysRequestParameters
-        .builder()
-        .page(1)
-        .perPage(1)
-        .includeTotals(true)
-        .build()
-);
+client.keys().encryption().delete("kid");
 ```
 </dd>
 </dl>
@@ -24417,23 +25314,7 @@ client.keys().encryption().list(
 <dl>
 <dd>
 
-**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**perPage:** `Optional<Integer>` — Number of results per page. Default value is 50, maximum value is 100.
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+**kid:** `String` — Encryption key ID
     
 </dd>
 </dl>
@@ -24445,7 +25326,7 @@ client.keys().encryption().list(
 </dl>
 </details>
 
-<details><summary><code>client.keys.encryption.create(request) -> CreateEncryptionKeyResponseContent</code></summary>
+<details><summary><code>client.keys.encryption.createPublicWrappingKey(kid) -> CreateEncryptionKeyPublicWrappingResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -24457,7 +25338,7 @@ client.keys().encryption().list(
 <dl>
 <dd>
 
-Create the new, pre-activated encryption key, without the key material.
+Create the public wrapping key to wrap your own encryption key material.
 </dd>
 </dl>
 </dd>
@@ -24472,12 +25353,7 @@ Create the new, pre-activated encryption key, without the key material.
 <dd>
 
 ```java
-client.keys().encryption().create(
-    CreateEncryptionKeyRequestContent
-        .builder()
-        .type(CreateEncryptionKeyType.CUSTOMER_PROVIDED_ROOT_KEY)
-        .build()
-);
+client.keys().encryption().createPublicWrappingKey("kid");
 ```
 </dd>
 </dl>
@@ -24492,7 +25368,7 @@ client.keys().encryption().create(
 <dl>
 <dd>
 
-**type:** `CreateEncryptionKeyType` 
+**kid:** `String` — Encryption key ID
     
 </dd>
 </dl>
@@ -24504,7 +25380,8 @@ client.keys().encryption().create(
 </dl>
 </details>
 
-<details><summary><code>client.keys.encryption.rekey()</code></summary>
+## Keys Signing
+<details><summary><code>client.keys.signing.list() -> List&amp;lt;SigningKeys&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -24516,7 +25393,7 @@ client.keys().encryption().create(
 <dl>
 <dd>
 
-Perform rekeying operation on the key hierarchy.
+Retrieve details of all the application signing keys associated with your tenant.
 </dd>
 </dl>
 </dd>
@@ -24531,7 +25408,7 @@ Perform rekeying operation on the key hierarchy.
 <dd>
 
 ```java
-client.keys().encryption().rekey();
+client.keys().signing().list();
 ```
 </dd>
 </dl>
@@ -24543,7 +25420,7 @@ client.keys().encryption().rekey();
 </dl>
 </details>
 
-<details><summary><code>client.keys.encryption.get(kid) -> GetEncryptionKeyResponseContent</code></summary>
+<details><summary><code>client.keys.signing.rotate() -> RotateSigningKeysResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -24555,7 +25432,7 @@ client.keys().encryption().rekey();
 <dl>
 <dd>
 
-Retrieve details of the encryption key with the given ID.
+Rotate the application signing key of your tenant.
 </dd>
 </dl>
 </dd>
@@ -24570,34 +25447,19 @@ Retrieve details of the encryption key with the given ID.
 <dd>
 
 ```java
-client.keys().encryption().get("kid");
+client.keys().signing().rotate();
 ```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### ⚙️ Parameters
-
-<dl>
-<dd>
-
-<dl>
-<dd>
-
-**kid:** `String` — Encryption key ID
-    
-</dd>
-</dl>
-</dd>
-</dl>
-
 
 </dd>
 </dl>
 </details>
 
-<details><summary><code>client.keys.encryption.import_(kid, request) -> ImportEncryptionKeyResponseContent</code></summary>
+<details><summary><code>client.keys.signing.get(kid) -> GetSigningKeysResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -24609,7 +25471,7 @@ client.keys().encryption().get("kid");
 <dl>
 <dd>
 
-Import wrapped key material and activate encryption key.
+Retrieve details of the application signing key with the given ID.
 </dd>
 </dl>
 </dd>
@@ -24624,13 +25486,7 @@ Import wrapped key material and activate encryption key.
 <dd>
 
 ```java
-client.keys().encryption().import_(
-    "kid",
-    ImportEncryptionKeyRequestContent
-        .builder()
-        .wrappedKey("wrapped_key")
-        .build()
-);
+client.keys().signing().get("kid");
 ```
 </dd>
 </dl>
@@ -24645,15 +25501,7 @@ client.keys().encryption().import_(
 <dl>
 <dd>
 
-**kid:** `String` — Encryption key ID
-    
-</dd>
-</dl>
-
-<dl>
-<dd>
-
-**wrappedKey:** `String` — Base64 encoded ciphertext of key material wrapped by public wrapping key.
+**kid:** `String` — Key id of the key to retrieve
     
 </dd>
 </dl>
@@ -24665,7 +25513,7 @@ client.keys().encryption().import_(
 </dl>
 </details>
 
-<details><summary><code>client.keys.encryption.delete(kid)</code></summary>
+<details><summary><code>client.keys.signing.revoke(kid) -> RevokedSigningKeysResponseContent</code></summary>
 <dl>
 <dd>
 
@@ -24677,7 +25525,7 @@ client.keys().encryption().import_(
 <dl>
 <dd>
 
-Delete the custom provided encryption key with the given ID and move back to using native encryption key.
+Revoke the application signing key with the given ID.
 </dd>
 </dl>
 </dd>
@@ -24692,7 +25540,7 @@ Delete the custom provided encryption key with the given ID and move back to usi
 <dd>
 
 ```java
-client.keys().encryption().delete("kid");
+client.keys().signing().revoke("kid");
 ```
 </dd>
 </dl>
@@ -24707,7 +25555,7 @@ client.keys().encryption().delete("kid");
 <dl>
 <dd>
 
-**kid:** `String` — Encryption key ID
+**kid:** `String` — Key id of the key to revoke
     
 </dd>
 </dl>
@@ -24719,11 +25567,12 @@ client.keys().encryption().delete("kid");
 </dl>
 </details>
 
-<details><summary><code>client.keys.encryption.createPublicWrappingKey(kid) -> CreateEncryptionKeyPublicWrappingResponseContent</code></summary>
+## Organizations ClientGrants
+<details><summary><code>client.organizations.clientGrants.list(id) -> SyncPagingIterable&amp;lt;OrganizationClientGrant&amp;gt;</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -24731,13 +25580,28 @@ client.keys().encryption().delete("kid");
 <dl>
 <dd>
 
-Create the public wrapping key to wrap your own encryption key material.
+```java
+client.organizations().clientGrants().list(
+    "id",
+    ListOrganizationClientGrantsRequestParameters
+        .builder()
+        .audience("audience")
+        .clientId("client_id")
+        .page(1)
+        .perPage(1)
+        .includeTotals(true)
+        .grantIds(
+            Arrays.asList("grant_ids")
+        )
+        .build()
+);
+```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -24745,23 +25609,55 @@ Create the public wrapping key to wrap your own encryption key material.
 <dl>
 <dd>
 
-```java
-client.keys().encryption().createPublicWrappingKey("kid");
-```
+**id:** `String` — Organization identifier.
+    
 </dd>
 </dl>
+
+<dl>
+<dd>
+
+**audience:** `Optional<String>` — Optional filter on audience of the client grant.
+    
 </dd>
 </dl>
 
-#### ⚙️ Parameters
+<dl>
+<dd>
+
+**clientId:** `Optional<String>` — Optional filter on client_id of the client grant.
+    
+</dd>
+</dl>
 
 <dl>
 <dd>
 
+**grantIds:** `Optional<String>` — Optional filter on the ID of the client grant. Must be URL encoded and may be specified multiple times (max 10).<br /><b>e.g.</b> <i>../client-grants?grant_ids=id1&grant_ids=id2</i>
+    
+</dd>
+</dl>
+
 <dl>
 <dd>
 
-**kid:** `String` — Encryption key ID
+**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**perPage:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
     
 </dd>
 </dl>
@@ -24773,12 +25669,11 @@ client.keys().encryption().createPublicWrappingKey("kid");
 </dl>
 </details>
 
-## Keys Signing
-<details><summary><code>client.keys.signing.list() -> List&amp;lt;SigningKeys&amp;gt;</code></summary>
+<details><summary><code>client.organizations.clientGrants.create(id, request) -> AssociateOrganizationClientGrantResponseContent</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -24786,13 +25681,21 @@ client.keys().encryption().createPublicWrappingKey("kid");
 <dl>
 <dd>
 
-Retrieve details of all the application signing keys associated with your tenant.
+```java
+client.organizations().clientGrants().create(
+    "id",
+    AssociateOrganizationClientGrantRequestContent
+        .builder()
+        .grantId("grant_id")
+        .build()
+);
+```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -24800,9 +25703,16 @@ Retrieve details of all the application signing keys associated with your tenant
 <dl>
 <dd>
 
-```java
-client.keys().signing().list();
-```
+**id:** `String` — Organization identifier.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**grantId:** `String` — A Client Grant ID to add to the organization.
+    
 </dd>
 </dl>
 </dd>
@@ -24813,11 +25723,11 @@ client.keys().signing().list();
 </dl>
 </details>
 
-<details><summary><code>client.keys.signing.rotate() -> RotateSigningKeysResponseContent</code></summary>
+<details><summary><code>client.organizations.clientGrants.delete(id, grantId)</code></summary>
 <dl>
 <dd>
 
-#### 📝 Description
+#### 🔌 Usage
 
 <dl>
 <dd>
@@ -24825,13 +25735,15 @@ client.keys().signing().list();
 <dl>
 <dd>
 
-Rotate the application signing key of your tenant.
+```java
+client.organizations().clientGrants().delete("id", "grant_id");
+```
 </dd>
 </dl>
 </dd>
 </dl>
 
-#### 🔌 Usage
+#### ⚙️ Parameters
 
 <dl>
 <dd>
@@ -24839,9 +25751,16 @@ Rotate the application signing key of your tenant.
 <dl>
 <dd>
 
-```java
-client.keys().signing().rotate();
-```
+**id:** `String` — Organization identifier.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**grantId:** `String` — The Client Grant ID to remove from the organization
+    
 </dd>
 </dl>
 </dd>
@@ -24852,7 +25771,8 @@ client.keys().signing().rotate();
 </dl>
 </details>
 
-<details><summary><code>client.keys.signing.get(kid) -> GetSigningKeysResponseContent</code></summary>
+## Organizations Clients
+<details><summary><code>client.organizations.clients.list(id) -> SyncPagingIterable&amp;lt;OrganizationClient&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -24864,7 +25784,12 @@ client.keys().signing().rotate();
 <dl>
 <dd>
 
-Retrieve details of the application signing key with the given ID.
+List all clients associated with an organization, using checkpoint pagination.
+<ul>
+  <li>
+    <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+  </li>
+</ul>
 </dd>
 </dl>
 </dd>
@@ -24879,7 +25804,14 @@ Retrieve details of the application signing key with the given ID.
 <dd>
 
 ```java
-client.keys().signing().get("kid");
+client.organizations().clients().list(
+    "id",
+    ListOrganizationClientsRequestParameters
+        .builder()
+        .from("from")
+        .take(1)
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -24894,7 +25826,23 @@ client.keys().signing().get("kid");
 <dl>
 <dd>
 
-**kid:** `String` — Key id of the key to retrieve
+**id:** `String` — ID of the organization.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**from:** `Optional<String>` — Optional Id from which to start selection.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50. Values greater than the maximum of 100 are capped at 100.
     
 </dd>
 </dl>
@@ -24906,7 +25854,7 @@ client.keys().signing().get("kid");
 </dl>
 </details>
 
-<details><summary><code>client.keys.signing.revoke(kid) -> RevokedSigningKeysResponseContent</code></summary>
+<details><summary><code>client.organizations.clients.create(id, request) -> List&amp;lt;OrganizationClient&amp;gt;</code></summary>
 <dl>
 <dd>
 
@@ -24918,7 +25866,7 @@ client.keys().signing().get("kid");
 <dl>
 <dd>
 
-Revoke the application signing key with the given ID.
+Associate one or more clients with an organization.
 </dd>
 </dl>
 </dd>
@@ -24933,7 +25881,21 @@ Revoke the application signing key with the given ID.
 <dd>
 
 ```java
-client.keys().signing().revoke("kid");
+client.organizations().clients().create(
+    "id",
+    CreateOrganizationClientsRequestContent
+        .builder()
+        .clients(
+            Arrays.asList(
+                CreateOrganizationClientRequestItem
+                    .builder()
+                    .clientId("client_id")
+                    .useForMemberAccess(true)
+                    .build()
+            )
+        )
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -24948,7 +25910,15 @@ client.keys().signing().revoke("kid");
 <dl>
 <dd>
 
-**kid:** `String` — Key id of the key to revoke
+**id:** `String` — ID of the organization.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**clients:** `List<CreateOrganizationClientRequestItem>` — List of clients to associate with the organization.
     
 </dd>
 </dl>
@@ -24960,11 +25930,24 @@ client.keys().signing().revoke("kid");
 </dl>
 </details>
 
-## Organizations ClientGrants
-<details><summary><code>client.organizations.clientGrants.list(id) -> SyncPagingIterable&amp;lt;OrganizationClientGrant&amp;gt;</code></summary>
+<details><summary><code>client.organizations.clients.delete(id, request)</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
 <dl>
 <dd>
 
+Remove one or more client associations from an organization.
+</dd>
+</dl>
+</dd>
+</dl>
+
 #### 🔌 Usage
 
 <dl>
@@ -24974,17 +25957,12 @@ client.keys().signing().revoke("kid");
 <dd>
 
 ```java
-client.organizations().clientGrants().list(
+client.organizations().clients().delete(
     "id",
-    ListOrganizationClientGrantsRequestParameters
+    DeleteOrganizationClientsRequestContent
         .builder()
-        .audience("audience")
-        .clientId("client_id")
-        .page(1)
-        .perPage(1)
-        .includeTotals(true)
-        .grantIds(
-            Arrays.asList("grant_ids")
+        .clients(
+            Arrays.asList("clients")
         )
         .build()
 );
@@ -25002,7 +25980,7 @@ client.organizations().clientGrants().list(
 <dl>
 <dd>
 
-**id:** `String` — Organization identifier.
+**id:** `String` — ID of the organization.
     
 </dd>
 </dl>
@@ -25010,61 +25988,35 @@ client.organizations().clientGrants().list(
 <dl>
 <dd>
 
-**audience:** `Optional<String>` — Optional filter on audience of the client grant.
+**clients:** `List<String>` — List of client IDs to disassociate from the organization.
     
 </dd>
 </dl>
-
-<dl>
-<dd>
-
-**clientId:** `Optional<String>` — Optional filter on client_id of the client grant.
-    
 </dd>
 </dl>
 
-<dl>
-<dd>
 
-**grantIds:** `Optional<String>` — Optional filter on the ID of the client grant. Must be URL encoded and may be specified multiple times (max 10).<br /><b>e.g.</b> <i>../client-grants?grant_ids=id1&grant_ids=id2</i>
-    
 </dd>
 </dl>
+</details>
 
+<details><summary><code>client.organizations.clients.get(id, clientId) -> GetOrganizationClientResponseContent</code></summary>
 <dl>
 <dd>
 
-**page:** `Optional<Integer>` — Page index of the results to return. First page is 0.
-    
-</dd>
-</dl>
+#### 📝 Description
 
 <dl>
 <dd>
 
-**perPage:** `Optional<Integer>` — Number of results per page. Defaults to 50.
-    
-</dd>
-</dl>
-
 <dl>
 <dd>
 
-**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
-    
-</dd>
-</dl>
+Get a specific client association for an organization.
 </dd>
 </dl>
-
-
 </dd>
 </dl>
-</details>
-
-<details><summary><code>client.organizations.clientGrants.create(id, request) -> AssociateOrganizationClientGrantResponseContent</code></summary>
-<dl>
-<dd>
 
 #### 🔌 Usage
 
@@ -25075,13 +26027,7 @@ client.organizations().clientGrants().list(
 <dd>
 
 ```java
-client.organizations().clientGrants().create(
-    "id",
-    AssociateOrganizationClientGrantRequestContent
-        .builder()
-        .grantId("grant_id")
-        .build()
-);
+client.organizations().clients().get("id", "client_id");
 ```
 </dd>
 </dl>
@@ -25096,7 +26042,7 @@ client.organizations().clientGrants().create(
 <dl>
 <dd>
 
-**id:** `String` — Organization identifier.
+**id:** `String` — ID of the organization.
     
 </dd>
 </dl>
@@ -25104,7 +26050,7 @@ client.organizations().clientGrants().create(
 <dl>
 <dd>
 
-**grantId:** `String` — A Client Grant ID to add to the organization.
+**clientId:** `String` — ID of the client association to retrieve.
     
 </dd>
 </dl>
@@ -25116,10 +26062,24 @@ client.organizations().clientGrants().create(
 </dl>
 </details>
 
-<details><summary><code>client.organizations.clientGrants.delete(id, grantId)</code></summary>
+<details><summary><code>client.organizations.clients.update(id, clientId, request) -> UpdateOrganizationClientResponseContent</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
 <dl>
 <dd>
 
+Update an organization client association.
+</dd>
+</dl>
+</dd>
+</dl>
+
 #### 🔌 Usage
 
 <dl>
@@ -25129,7 +26089,13 @@ client.organizations().clientGrants().create(
 <dd>
 
 ```java
-client.organizations().clientGrants().delete("id", "grant_id");
+client.organizations().clients().update(
+    "id",
+    "client_id",
+    UpdateOrganizationClientRequestContent
+        .builder()
+        .build()
+);
 ```
 </dd>
 </dl>
@@ -25144,7 +26110,7 @@ client.organizations().clientGrants().delete("id", "grant_id");
 <dl>
 <dd>
 
-**id:** `String` — Organization identifier.
+**id:** `String` — ID of the organization.
     
 </dd>
 </dl>
@@ -25152,7 +26118,15 @@ client.organizations().clientGrants().delete("id", "grant_id");
 <dl>
 <dd>
 
-**grantId:** `String` — The Client Grant ID to remove from the organization
+**clientId:** `String` — ID of the client association to update.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**useForMemberAccess:** `Optional<Boolean>` — Whether this client is used for member access to the organization.
     
 </dd>
 </dl>
@@ -26775,7 +27749,7 @@ List organization members.
 This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
 
 - Use the `fields` parameter to optionally define the specific member details retrieved. If `fields` is left blank, all fields (except roles) are returned.
-- Member roles are not sent by default. Use `fields=roles` to retrieve the roles assigned to each listed member. To use this parameter, you must include the `read:organization_member_roles` scope in the token.
+- Member roles are not sent by default. Use `fields=roles` to retrieve the roles assigned to each listed member. To use this parameter, you must include the `read:organization_member_roles` scope in the token. Only directly assigned roles are returned. To also include group-based role assignments, use `GET /api/v2/organizations/{id}/members/{user_id}/effective-roles`.
 
 This endpoint supports two types of pagination:
 
@@ -26805,6 +27779,7 @@ client.organizations().members().list(
     "id",
     ListOrganizationMembersRequestParameters
         .builder()
+        .includeTotals(true)
         .from("from")
         .take(1)
         .fields("fields")
@@ -26833,6 +27808,14 @@ client.organizations().members().list(
 <dl>
 <dd>
 
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
 **from:** `Optional<String>` — Optional Id from which to start selection.
     
 </dd>
@@ -27423,6 +28406,8 @@ client.organizations().members().effectiveRoles().list(
 Retrieve detailed list of roles assigned to a given user within the context of a specific Organization. 
 
 Users can be members of multiple Organizations with unique roles assigned for each membership. This action only returns the roles associated with the specified Organization; any roles assigned to the user within other Organizations are not included.
+
+**Note**: Returns only direct role assignments for this member. To also include group-based role assignments, use `GET /api/v2/organizations/{id}/members/{user_id}/effective-roles`.
 </dd>
 </dl>
 </dd>
@@ -27777,6 +28762,11 @@ client.organizations().members().effectiveRoles().sources().groups().list(
 <dd>
 
 List the organization members assigned a specific role within the context of an organization.
+<ul>
+  <li>
+    <b>Note</b>: Returns only members with direct role assignments. For groups assigned to this role within the organization, use <code>GET /api/v2/organizations/{organization_id}/roles/{role_id}/groups</code>.
+  </li>
+</ul>
 </dd>
 </dl>
 </dd>
@@ -27864,6 +28854,93 @@ client.organizations().roles().members().list(
 </dl>
 
 
+</dd>
+</dl>
+</details>
+
+## Organizations Roles Groups
+<details><summary><code>client.organizations.roles.groups.list(organizationId, roleId) -> SyncPagingIterable&amp;lt;RoleGroup&amp;gt;</code></summary>
+<dl>
+<dd>
+
+#### 📝 Description
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+Retrieve the list of groups assigned to a role in the context of an organization.
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### 🔌 Usage
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+```java
+client.organizations().roles().groups().list(
+    "organization_id",
+    "role_id",
+    ListOrganizationRoleGroupsRequestParameters
+        .builder()
+        .from("from")
+        .take(1)
+        .build()
+);
+```
+</dd>
+</dl>
+</dd>
+</dl>
+
+#### ⚙️ Parameters
+
+<dl>
+<dd>
+
+<dl>
+<dd>
+
+**organizationId:** `String` — ID of the organization.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**roleId:** `String` — ID of the role.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**from:** `Optional<String>` — Optional Id from which to start selection.
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
+**take:** `Optional<Integer>` — Number of results per page. Defaults to 50.
+    
+</dd>
+</dl>
+</dd>
+</dl>
+
+
 </dd>
 </dl>
 </details>
@@ -29167,6 +30244,8 @@ client.roles().permissions().delete(
 
 Retrieve list of users associated with a specific role. For Dashboard instructions, review [View Users Assigned to Roles](https://auth0.com/docs/manage-users/access-control/configure-core-rbac/roles/view-users-assigned-to-roles).
 
+**Note**: Returns only users with direct role assignments. For groups assigned to this role, use `GET /api/v2/roles/{id}/groups`.
+
 This endpoint supports two types of pagination:
 
 - Offset pagination
@@ -29200,6 +30279,7 @@ client.roles().users().list(
     "id",
     ListRoleUsersRequestParameters
         .builder()
+        .includeTotals(true)
         .from("from")
         .take(1)
         .build()
@@ -29226,6 +30306,14 @@ client.roles().users().list(
 <dl>
 <dd>
 
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
 **from:** `Optional<String>` — Optional Id from which to start selection.
     
 </dd>
@@ -31126,6 +32214,7 @@ client.users().groups().get(
         .builder()
         .fields("fields")
         .includeFields(true)
+        .includeTotals(true)
         .from("from")
         .take(1)
         .build()
@@ -31168,6 +32257,14 @@ client.users().groups().get(
 <dl>
 <dd>
 
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
 **from:** `Optional<String>` — Optional Id from which to start selection.
     
 </dd>
@@ -31700,6 +32797,8 @@ client.users().organizations().list(
 <dd>
 
 Retrieve all permissions associated with the user.
+
+**Note**: Returns only permissions from direct assignments and directly assigned roles. For permissions a user has via group-based role assignments, use `GET /api/v2/users/{id}/effective-permissions`.
 </dd>
 </dl>
 </dd>
@@ -32021,6 +33120,8 @@ client.users().riskAssessments().clear(
 Retrieve detailed list of all user roles currently assigned to a user.
 
 **Note**: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: [Get user roles assigned to an Organization member](https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles).
+
+**Note**: Returns only direct role assignments. To also include group-based role assignments, use `GET /api/v2/users/{id}/effective-roles`.
 </dd>
 </dl>
 </dd>
@@ -32270,6 +33371,7 @@ client.users().refreshToken().list(
     "user_id",
     ListRefreshTokensRequestParameters
         .builder()
+        .includeTotals(true)
         .from("from")
         .take(1)
         .build()
@@ -32296,6 +33398,14 @@ client.users().refreshToken().list(
 <dl>
 <dd>
 
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
 **from:** `Optional<String>` — An optional cursor from which to start the selection (exclusive).
     
 </dd>
@@ -32402,6 +33512,7 @@ client.users().sessions().list(
     "user_id",
     ListUserSessionsRequestParameters
         .builder()
+        .includeTotals(true)
         .from("from")
         .take(1)
         .build()
@@ -32428,6 +33539,14 @@ client.users().sessions().list(
 <dl>
 <dd>
 
+**includeTotals:** `Optional<Boolean>` — Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+    
+</dd>
+</dl>
+
+<dl>
+<dd>
+
 **from:** `Optional<String>` — An optional cursor from which to start the selection (exclusive).
     
 </dd>
diff --git a/src/main/java/com/auth0/client/mgmt/AgentsClient.java b/src/main/java/com/auth0/client/mgmt/AgentsClient.java
new file mode 100644
index 00000000..c65b25b5
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/AgentsClient.java
@@ -0,0 +1,129 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt;
+
+import com.auth0.client.mgmt.core.ClientOptions;
+import com.auth0.client.mgmt.core.RequestOptions;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
+import com.auth0.client.mgmt.types.AgentResponseContent;
+import com.auth0.client.mgmt.types.CreateAgentRequestContent;
+import com.auth0.client.mgmt.types.ListAgentsRequestParameters;
+import com.auth0.client.mgmt.types.PatchAgentRequestParameters;
+
+public class AgentsClient {
+    protected final ClientOptions clientOptions;
+
+    private final RawAgentsClient rawClient;
+
+    public AgentsClient(ClientOptions clientOptions) {
+        this.clientOptions = clientOptions;
+        this.rawClient = new RawAgentsClient(clientOptions);
+    }
+
+    /**
+     * Get responses with HTTP metadata like headers
+     */
+    public RawAgentsClient withRawResponse() {
+        return this.rawClient;
+    }
+
+    /**
+     * Get agents
+     */
+    public SyncPagingIterable<AgentResponseContent> list() {
+        return this.rawClient.list().body();
+    }
+
+    /**
+     * Get agents
+     */
+    public SyncPagingIterable<AgentResponseContent> list(RequestOptions requestOptions) {
+        return this.rawClient.list(requestOptions).body();
+    }
+
+    /**
+     * Get agents
+     */
+    public SyncPagingIterable<AgentResponseContent> list(ListAgentsRequestParameters request) {
+        return this.rawClient.list(request).body();
+    }
+
+    /**
+     * Get agents
+     */
+    public SyncPagingIterable<AgentResponseContent> list(
+            ListAgentsRequestParameters request, RequestOptions requestOptions) {
+        return this.rawClient.list(request, requestOptions).body();
+    }
+
+    /**
+     * Create an agent
+     */
+    public AgentResponseContent create(CreateAgentRequestContent request) {
+        return this.rawClient.create(request).body();
+    }
+
+    /**
+     * Create an agent
+     */
+    public AgentResponseContent create(CreateAgentRequestContent request, RequestOptions requestOptions) {
+        return this.rawClient.create(request, requestOptions).body();
+    }
+
+    /**
+     * Get an agent
+     */
+    public AgentResponseContent read(String id) {
+        return this.rawClient.read(id).body();
+    }
+
+    /**
+     * Get an agent
+     */
+    public AgentResponseContent read(String id, RequestOptions requestOptions) {
+        return this.rawClient.read(id, requestOptions).body();
+    }
+
+    /**
+     * Delete an agent
+     */
+    public void delete(String id) {
+        this.rawClient.delete(id).body();
+    }
+
+    /**
+     * Delete an agent
+     */
+    public void delete(String id, RequestOptions requestOptions) {
+        this.rawClient.delete(id, requestOptions).body();
+    }
+
+    /**
+     * Update an agent
+     */
+    public AgentResponseContent update(String id) {
+        return this.rawClient.update(id).body();
+    }
+
+    /**
+     * Update an agent
+     */
+    public AgentResponseContent update(String id, RequestOptions requestOptions) {
+        return this.rawClient.update(id, requestOptions).body();
+    }
+
+    /**
+     * Update an agent
+     */
+    public AgentResponseContent update(String id, PatchAgentRequestParameters request) {
+        return this.rawClient.update(id, request).body();
+    }
+
+    /**
+     * Update an agent
+     */
+    public AgentResponseContent update(String id, PatchAgentRequestParameters request, RequestOptions requestOptions) {
+        return this.rawClient.update(id, request, requestOptions).body();
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/AsyncAgentsClient.java b/src/main/java/com/auth0/client/mgmt/AsyncAgentsClient.java
new file mode 100644
index 00000000..e6598c36
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/AsyncAgentsClient.java
@@ -0,0 +1,132 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt;
+
+import com.auth0.client.mgmt.core.ClientOptions;
+import com.auth0.client.mgmt.core.RequestOptions;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
+import com.auth0.client.mgmt.types.AgentResponseContent;
+import com.auth0.client.mgmt.types.CreateAgentRequestContent;
+import com.auth0.client.mgmt.types.ListAgentsRequestParameters;
+import com.auth0.client.mgmt.types.PatchAgentRequestParameters;
+import java.util.concurrent.CompletableFuture;
+
+public class AsyncAgentsClient {
+    protected final ClientOptions clientOptions;
+
+    private final AsyncRawAgentsClient rawClient;
+
+    public AsyncAgentsClient(ClientOptions clientOptions) {
+        this.clientOptions = clientOptions;
+        this.rawClient = new AsyncRawAgentsClient(clientOptions);
+    }
+
+    /**
+     * Get responses with HTTP metadata like headers
+     */
+    public AsyncRawAgentsClient withRawResponse() {
+        return this.rawClient;
+    }
+
+    /**
+     * Get agents
+     */
+    public CompletableFuture<SyncPagingIterable<AgentResponseContent>> list() {
+        return this.rawClient.list().thenApply(response -> response.body());
+    }
+
+    /**
+     * Get agents
+     */
+    public CompletableFuture<SyncPagingIterable<AgentResponseContent>> list(RequestOptions requestOptions) {
+        return this.rawClient.list(requestOptions).thenApply(response -> response.body());
+    }
+
+    /**
+     * Get agents
+     */
+    public CompletableFuture<SyncPagingIterable<AgentResponseContent>> list(ListAgentsRequestParameters request) {
+        return this.rawClient.list(request).thenApply(response -> response.body());
+    }
+
+    /**
+     * Get agents
+     */
+    public CompletableFuture<SyncPagingIterable<AgentResponseContent>> list(
+            ListAgentsRequestParameters request, RequestOptions requestOptions) {
+        return this.rawClient.list(request, requestOptions).thenApply(response -> response.body());
+    }
+
+    /**
+     * Create an agent
+     */
+    public CompletableFuture<AgentResponseContent> create(CreateAgentRequestContent request) {
+        return this.rawClient.create(request).thenApply(response -> response.body());
+    }
+
+    /**
+     * Create an agent
+     */
+    public CompletableFuture<AgentResponseContent> create(
+            CreateAgentRequestContent request, RequestOptions requestOptions) {
+        return this.rawClient.create(request, requestOptions).thenApply(response -> response.body());
+    }
+
+    /**
+     * Get an agent
+     */
+    public CompletableFuture<AgentResponseContent> read(String id) {
+        return this.rawClient.read(id).thenApply(response -> response.body());
+    }
+
+    /**
+     * Get an agent
+     */
+    public CompletableFuture<AgentResponseContent> read(String id, RequestOptions requestOptions) {
+        return this.rawClient.read(id, requestOptions).thenApply(response -> response.body());
+    }
+
+    /**
+     * Delete an agent
+     */
+    public CompletableFuture<Void> delete(String id) {
+        return this.rawClient.delete(id).thenApply(response -> response.body());
+    }
+
+    /**
+     * Delete an agent
+     */
+    public CompletableFuture<Void> delete(String id, RequestOptions requestOptions) {
+        return this.rawClient.delete(id, requestOptions).thenApply(response -> response.body());
+    }
+
+    /**
+     * Update an agent
+     */
+    public CompletableFuture<AgentResponseContent> update(String id) {
+        return this.rawClient.update(id).thenApply(response -> response.body());
+    }
+
+    /**
+     * Update an agent
+     */
+    public CompletableFuture<AgentResponseContent> update(String id, RequestOptions requestOptions) {
+        return this.rawClient.update(id, requestOptions).thenApply(response -> response.body());
+    }
+
+    /**
+     * Update an agent
+     */
+    public CompletableFuture<AgentResponseContent> update(String id, PatchAgentRequestParameters request) {
+        return this.rawClient.update(id, request).thenApply(response -> response.body());
+    }
+
+    /**
+     * Update an agent
+     */
+    public CompletableFuture<AgentResponseContent> update(
+            String id, PatchAgentRequestParameters request, RequestOptions requestOptions) {
+        return this.rawClient.update(id, request, requestOptions).thenApply(response -> response.body());
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/AsyncManagementApi.java b/src/main/java/com/auth0/client/mgmt/AsyncManagementApi.java
index 46b51ca6..4604539c 100644
--- a/src/main/java/com/auth0/client/mgmt/AsyncManagementApi.java
+++ b/src/main/java/com/auth0/client/mgmt/AsyncManagementApi.java
@@ -20,6 +20,8 @@ public class AsyncManagementApi {
 
     protected final Supplier<AsyncActionsClient> actionsClient;
 
+    protected final Supplier<AsyncAgentsClient> agentsClient;
+
     protected final Supplier<AsyncBrandingClient> brandingClient;
 
     protected final Supplier<AsyncClientGrantsClient> clientGrantsClient;
@@ -111,6 +113,7 @@ public class AsyncManagementApi {
     public AsyncManagementApi(ClientOptions clientOptions) {
         this.clientOptions = clientOptions;
         this.actionsClient = Suppliers.memoize(() -> new AsyncActionsClient(clientOptions));
+        this.agentsClient = Suppliers.memoize(() -> new AsyncAgentsClient(clientOptions));
         this.brandingClient = Suppliers.memoize(() -> new AsyncBrandingClient(clientOptions));
         this.clientGrantsClient = Suppliers.memoize(() -> new AsyncClientGrantsClient(clientOptions));
         this.clientsClient = Suppliers.memoize(() -> new AsyncClientsClient(clientOptions));
@@ -161,6 +164,10 @@ public AsyncActionsClient actions() {
         return this.actionsClient.get();
     }
 
+    public AsyncAgentsClient agents() {
+        return this.agentsClient.get();
+    }
+
     public AsyncBrandingClient branding() {
         return this.brandingClient.get();
     }
diff --git a/src/main/java/com/auth0/client/mgmt/AsyncOrganizationsClient.java b/src/main/java/com/auth0/client/mgmt/AsyncOrganizationsClient.java
index 1fba755a..b36fa923 100644
--- a/src/main/java/com/auth0/client/mgmt/AsyncOrganizationsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/AsyncOrganizationsClient.java
@@ -8,6 +8,7 @@
 import com.auth0.client.mgmt.core.Suppliers;
 import com.auth0.client.mgmt.core.SyncPagingIterable;
 import com.auth0.client.mgmt.organizations.AsyncClientGrantsClient;
+import com.auth0.client.mgmt.organizations.AsyncClientsClient;
 import com.auth0.client.mgmt.organizations.AsyncConnectionsClient;
 import com.auth0.client.mgmt.organizations.AsyncDiscoveryDomainsClient;
 import com.auth0.client.mgmt.organizations.AsyncEnabledConnectionsClient;
@@ -33,6 +34,8 @@ public class AsyncOrganizationsClient {
 
     protected final Supplier<AsyncClientGrantsClient> clientGrantsClient;
 
+    protected final Supplier<AsyncClientsClient> clientsClient;
+
     protected final Supplier<AsyncConnectionsClient> connectionsClient;
 
     protected final Supplier<AsyncDiscoveryDomainsClient> discoveryDomainsClient;
@@ -51,6 +54,7 @@ public AsyncOrganizationsClient(ClientOptions clientOptions) {
         this.clientOptions = clientOptions;
         this.rawClient = new AsyncRawOrganizationsClient(clientOptions);
         this.clientGrantsClient = Suppliers.memoize(() -> new AsyncClientGrantsClient(clientOptions));
+        this.clientsClient = Suppliers.memoize(() -> new AsyncClientsClient(clientOptions));
         this.connectionsClient = Suppliers.memoize(() -> new AsyncConnectionsClient(clientOptions));
         this.discoveryDomainsClient = Suppliers.memoize(() -> new AsyncDiscoveryDomainsClient(clientOptions));
         this.enabledConnectionsClient = Suppliers.memoize(() -> new AsyncEnabledConnectionsClient(clientOptions));
@@ -242,6 +246,10 @@ public AsyncClientGrantsClient clientGrants() {
         return this.clientGrantsClient.get();
     }
 
+    public AsyncClientsClient clients() {
+        return this.clientsClient.get();
+    }
+
     public AsyncConnectionsClient connections() {
         return this.connectionsClient.get();
     }
diff --git a/src/main/java/com/auth0/client/mgmt/AsyncRawAgentsClient.java b/src/main/java/com/auth0/client/mgmt/AsyncRawAgentsClient.java
new file mode 100644
index 00000000..b600fc24
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/AsyncRawAgentsClient.java
@@ -0,0 +1,617 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt;
+
+import com.auth0.client.mgmt.core.ClientOptions;
+import com.auth0.client.mgmt.core.ManagementApiException;
+import com.auth0.client.mgmt.core.ManagementApiHttpResponse;
+import com.auth0.client.mgmt.core.ManagementException;
+import com.auth0.client.mgmt.core.MediaTypes;
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.core.QueryStringMapper;
+import com.auth0.client.mgmt.core.RequestOptions;
+import com.auth0.client.mgmt.core.RetryInterceptor;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
+import com.auth0.client.mgmt.errors.BadRequestError;
+import com.auth0.client.mgmt.errors.ConflictError;
+import com.auth0.client.mgmt.errors.ForbiddenError;
+import com.auth0.client.mgmt.errors.NotFoundError;
+import com.auth0.client.mgmt.errors.TooManyRequestsError;
+import com.auth0.client.mgmt.errors.UnauthorizedError;
+import com.auth0.client.mgmt.types.AgentResponseContent;
+import com.auth0.client.mgmt.types.CreateAgentRequestContent;
+import com.auth0.client.mgmt.types.ListAgentsRequestParameters;
+import com.auth0.client.mgmt.types.ListAgentsResponseContent;
+import com.auth0.client.mgmt.types.PatchAgentRequestParameters;
+import com.fasterxml.jackson.core.JsonProcessingException;
+import java.io.IOException;
+import java.util.List;
+import java.util.Optional;
+import java.util.concurrent.CompletableFuture;
+import java.util.concurrent.ExecutionException;
+import okhttp3.Call;
+import okhttp3.Callback;
+import okhttp3.Headers;
+import okhttp3.HttpUrl;
+import okhttp3.OkHttpClient;
+import okhttp3.Request;
+import okhttp3.RequestBody;
+import okhttp3.Response;
+import okhttp3.ResponseBody;
+import org.jetbrains.annotations.NotNull;
+
+public class AsyncRawAgentsClient {
+    protected final ClientOptions clientOptions;
+
+    public AsyncRawAgentsClient(ClientOptions clientOptions) {
+        this.clientOptions = clientOptions;
+    }
+
+    /**
+     * Get agents
+     */
+    public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<AgentResponseContent>>> list() {
+        return list(ListAgentsRequestParameters.builder().build());
+    }
+
+    /**
+     * Get agents
+     */
+    public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<AgentResponseContent>>> list(
+            RequestOptions requestOptions) {
+        return list(ListAgentsRequestParameters.builder().build(), requestOptions);
+    }
+
+    /**
+     * Get agents
+     */
+    public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<AgentResponseContent>>> list(
+            ListAgentsRequestParameters request) {
+        return list(request, null);
+    }
+
+    /**
+     * Get agents
+     */
+    public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<AgentResponseContent>>> list(
+            ListAgentsRequestParameters request, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("agents");
+        if (!request.getFrom().isAbsent()) {
+            QueryStringMapper.addQueryParameter(
+                    httpUrl, "from", request.getFrom().orElse(null), false);
+        }
+        QueryStringMapper.addQueryParameter(httpUrl, "take", request.getTake().orElse(50), false);
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        Request.Builder _requestBuilder = new Request.Builder()
+                .url(httpUrl.build())
+                .method("GET", null)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Accept", "application/json");
+        Request okhttpRequest = _requestBuilder.build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<AgentResponseContent>>> future =
+                new CompletableFuture<>();
+        client.newCall(okhttpRequest).enqueue(new Callback() {
+            @Override
+            public void onResponse(@NotNull Call call, @NotNull Response response) throws IOException {
+                try (ResponseBody responseBody = response.body()) {
+                    String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+                    if (response.isSuccessful()) {
+                        ListAgentsResponseContent parsedResponse = ObjectMappers.JSON_MAPPER.readValue(
+                                responseBodyString, ListAgentsResponseContent.class);
+                        Optional<String> startingAfter = parsedResponse.getNext();
+                        ListAgentsRequestParameters nextRequest = ListAgentsRequestParameters.builder()
+                                .from(request)
+                                .from(startingAfter)
+                                .build();
+                        List<AgentResponseContent> result = parsedResponse.getAgents();
+                        future.complete(new ManagementApiHttpResponse<>(
+                                new SyncPagingIterable<AgentResponseContent>(
+                                        startingAfter.isPresent(), result, parsedResponse, () -> {
+                                            try {
+                                                return list(nextRequest, requestOptions)
+                                                        .get()
+                                                        .body();
+                                            } catch (InterruptedException | ExecutionException e) {
+                                                throw new RuntimeException(e);
+                                            }
+                                        }),
+                                response));
+                        return;
+                    }
+                    try {
+                        switch (response.code()) {
+                            case 400:
+                                future.completeExceptionally(new BadRequestError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 401:
+                                future.completeExceptionally(new UnauthorizedError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 403:
+                                future.completeExceptionally(new ForbiddenError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 429:
+                                future.completeExceptionally(new TooManyRequestsError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                        }
+                    } catch (JsonProcessingException ignored) {
+                        // unable to map error response, throwing generic error
+                    }
+                    Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+                    future.completeExceptionally(new ManagementApiException(
+                            "Error with status code " + response.code(), response.code(), errorBody, response));
+                    return;
+                } catch (JsonProcessingException e) {
+                    future.completeExceptionally(
+                            new ManagementException("Failed to deserialize response: " + e.getMessage(), e));
+                } catch (IOException e) {
+                    future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+                }
+            }
+
+            @Override
+            public void onFailure(@NotNull Call call, @NotNull IOException e) {
+                future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+            }
+        });
+        return future;
+    }
+
+    /**
+     * Create an agent
+     */
+    public CompletableFuture<ManagementApiHttpResponse<AgentResponseContent>> create(
+            CreateAgentRequestContent request) {
+        return create(request, null);
+    }
+
+    /**
+     * Create an agent
+     */
+    public CompletableFuture<ManagementApiHttpResponse<AgentResponseContent>> create(
+            CreateAgentRequestContent request, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("agents");
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        RequestBody body;
+        try {
+            body = RequestBody.create(
+                    ObjectMappers.JSON_MAPPER.writeValueAsBytes(request), MediaTypes.APPLICATION_JSON);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to serialize request", e);
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("POST", body)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Content-Type", "application/json")
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        CompletableFuture<ManagementApiHttpResponse<AgentResponseContent>> future = new CompletableFuture<>();
+        client.newCall(okhttpRequest).enqueue(new Callback() {
+            @Override
+            public void onResponse(@NotNull Call call, @NotNull Response response) throws IOException {
+                try (ResponseBody responseBody = response.body()) {
+                    String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+                    if (response.isSuccessful()) {
+                        future.complete(new ManagementApiHttpResponse<>(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, AgentResponseContent.class),
+                                response));
+                        return;
+                    }
+                    try {
+                        switch (response.code()) {
+                            case 400:
+                                future.completeExceptionally(new BadRequestError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 401:
+                                future.completeExceptionally(new UnauthorizedError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 403:
+                                future.completeExceptionally(new ForbiddenError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 409:
+                                future.completeExceptionally(new ConflictError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 429:
+                                future.completeExceptionally(new TooManyRequestsError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                        }
+                    } catch (JsonProcessingException ignored) {
+                        // unable to map error response, throwing generic error
+                    }
+                    Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+                    future.completeExceptionally(new ManagementApiException(
+                            "Error with status code " + response.code(), response.code(), errorBody, response));
+                    return;
+                } catch (JsonProcessingException e) {
+                    future.completeExceptionally(
+                            new ManagementException("Failed to deserialize response: " + e.getMessage(), e));
+                } catch (IOException e) {
+                    future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+                }
+            }
+
+            @Override
+            public void onFailure(@NotNull Call call, @NotNull IOException e) {
+                future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+            }
+        });
+        return future;
+    }
+
+    /**
+     * Get an agent
+     */
+    public CompletableFuture<ManagementApiHttpResponse<AgentResponseContent>> read(String id) {
+        return read(id, null);
+    }
+
+    /**
+     * Get an agent
+     */
+    public CompletableFuture<ManagementApiHttpResponse<AgentResponseContent>> read(
+            String id, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("agents")
+                .addPathSegment(id);
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("GET", null)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        CompletableFuture<ManagementApiHttpResponse<AgentResponseContent>> future = new CompletableFuture<>();
+        client.newCall(okhttpRequest).enqueue(new Callback() {
+            @Override
+            public void onResponse(@NotNull Call call, @NotNull Response response) throws IOException {
+                try (ResponseBody responseBody = response.body()) {
+                    String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+                    if (response.isSuccessful()) {
+                        future.complete(new ManagementApiHttpResponse<>(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, AgentResponseContent.class),
+                                response));
+                        return;
+                    }
+                    try {
+                        switch (response.code()) {
+                            case 401:
+                                future.completeExceptionally(new UnauthorizedError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 403:
+                                future.completeExceptionally(new ForbiddenError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 404:
+                                future.completeExceptionally(new NotFoundError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 429:
+                                future.completeExceptionally(new TooManyRequestsError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                        }
+                    } catch (JsonProcessingException ignored) {
+                        // unable to map error response, throwing generic error
+                    }
+                    Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+                    future.completeExceptionally(new ManagementApiException(
+                            "Error with status code " + response.code(), response.code(), errorBody, response));
+                    return;
+                } catch (JsonProcessingException e) {
+                    future.completeExceptionally(
+                            new ManagementException("Failed to deserialize response: " + e.getMessage(), e));
+                } catch (IOException e) {
+                    future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+                }
+            }
+
+            @Override
+            public void onFailure(@NotNull Call call, @NotNull IOException e) {
+                future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+            }
+        });
+        return future;
+    }
+
+    /**
+     * Delete an agent
+     */
+    public CompletableFuture<ManagementApiHttpResponse<Void>> delete(String id) {
+        return delete(id, null);
+    }
+
+    /**
+     * Delete an agent
+     */
+    public CompletableFuture<ManagementApiHttpResponse<Void>> delete(String id, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("agents")
+                .addPathSegment(id);
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("DELETE", null)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        CompletableFuture<ManagementApiHttpResponse<Void>> future = new CompletableFuture<>();
+        client.newCall(okhttpRequest).enqueue(new Callback() {
+            @Override
+            public void onResponse(@NotNull Call call, @NotNull Response response) throws IOException {
+                try (ResponseBody responseBody = response.body()) {
+                    if (response.isSuccessful()) {
+                        future.complete(new ManagementApiHttpResponse<>(null, response));
+                        return;
+                    }
+                    String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+                    try {
+                        switch (response.code()) {
+                            case 400:
+                                future.completeExceptionally(new BadRequestError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 401:
+                                future.completeExceptionally(new UnauthorizedError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 403:
+                                future.completeExceptionally(new ForbiddenError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 429:
+                                future.completeExceptionally(new TooManyRequestsError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                        }
+                    } catch (JsonProcessingException ignored) {
+                        // unable to map error response, throwing generic error
+                    }
+                    Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+                    future.completeExceptionally(new ManagementApiException(
+                            "Error with status code " + response.code(), response.code(), errorBody, response));
+                    return;
+                } catch (JsonProcessingException e) {
+                    future.completeExceptionally(
+                            new ManagementException("Failed to deserialize response: " + e.getMessage(), e));
+                } catch (IOException e) {
+                    future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+                }
+            }
+
+            @Override
+            public void onFailure(@NotNull Call call, @NotNull IOException e) {
+                future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+            }
+        });
+        return future;
+    }
+
+    /**
+     * Update an agent
+     */
+    public CompletableFuture<ManagementApiHttpResponse<AgentResponseContent>> update(String id) {
+        return update(id, PatchAgentRequestParameters.builder().build());
+    }
+
+    /**
+     * Update an agent
+     */
+    public CompletableFuture<ManagementApiHttpResponse<AgentResponseContent>> update(
+            String id, RequestOptions requestOptions) {
+        return update(id, PatchAgentRequestParameters.builder().build(), requestOptions);
+    }
+
+    /**
+     * Update an agent
+     */
+    public CompletableFuture<ManagementApiHttpResponse<AgentResponseContent>> update(
+            String id, PatchAgentRequestParameters request) {
+        return update(id, request, null);
+    }
+
+    /**
+     * Update an agent
+     */
+    public CompletableFuture<ManagementApiHttpResponse<AgentResponseContent>> update(
+            String id, PatchAgentRequestParameters request, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("agents")
+                .addPathSegment(id);
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        RequestBody body;
+        try {
+            body = RequestBody.create(
+                    ObjectMappers.JSON_MAPPER.writeValueAsBytes(request), MediaTypes.APPLICATION_JSON);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to serialize request", e);
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("PATCH", body)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Content-Type", "application/json")
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        CompletableFuture<ManagementApiHttpResponse<AgentResponseContent>> future = new CompletableFuture<>();
+        client.newCall(okhttpRequest).enqueue(new Callback() {
+            @Override
+            public void onResponse(@NotNull Call call, @NotNull Response response) throws IOException {
+                try (ResponseBody responseBody = response.body()) {
+                    String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+                    if (response.isSuccessful()) {
+                        future.complete(new ManagementApiHttpResponse<>(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, AgentResponseContent.class),
+                                response));
+                        return;
+                    }
+                    try {
+                        switch (response.code()) {
+                            case 400:
+                                future.completeExceptionally(new BadRequestError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 401:
+                                future.completeExceptionally(new UnauthorizedError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 403:
+                                future.completeExceptionally(new ForbiddenError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 404:
+                                future.completeExceptionally(new NotFoundError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 429:
+                                future.completeExceptionally(new TooManyRequestsError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                        }
+                    } catch (JsonProcessingException ignored) {
+                        // unable to map error response, throwing generic error
+                    }
+                    Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+                    future.completeExceptionally(new ManagementApiException(
+                            "Error with status code " + response.code(), response.code(), errorBody, response));
+                    return;
+                } catch (JsonProcessingException e) {
+                    future.completeExceptionally(
+                            new ManagementException("Failed to deserialize response: " + e.getMessage(), e));
+                } catch (IOException e) {
+                    future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+                }
+            }
+
+            @Override
+            public void onFailure(@NotNull Call call, @NotNull IOException e) {
+                future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+            }
+        });
+        return future;
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/AsyncRawClientGrantsClient.java b/src/main/java/com/auth0/client/mgmt/AsyncRawClientGrantsClient.java
index ce2be7a5..81a82aff 100644
--- a/src/main/java/com/auth0/client/mgmt/AsyncRawClientGrantsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/AsyncRawClientGrantsClient.java
@@ -83,6 +83,8 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<ClientGran
         HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
                 .newBuilder()
                 .addPathSegments("client-grants");
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/AsyncRawConnectionsClient.java b/src/main/java/com/auth0/client/mgmt/AsyncRawConnectionsClient.java
index 2bd6e316..727b1c68 100644
--- a/src/main/java/com/auth0/client/mgmt/AsyncRawConnectionsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/AsyncRawConnectionsClient.java
@@ -136,6 +136,8 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Connection
         HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
                 .newBuilder()
                 .addPathSegments("connections");
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/AsyncRawGroupsClient.java b/src/main/java/com/auth0/client/mgmt/AsyncRawGroupsClient.java
index d7fa57a9..4bf5034f 100644
--- a/src/main/java/com/auth0/client/mgmt/AsyncRawGroupsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/AsyncRawGroupsClient.java
@@ -98,6 +98,8 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Group>>> l
             QueryStringMapper.addQueryParameter(
                     httpUrl, "include_fields", request.getIncludeFields().orElse(null), false);
         }
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/AsyncRawOrganizationsClient.java b/src/main/java/com/auth0/client/mgmt/AsyncRawOrganizationsClient.java
index e731a3d4..89745f55 100644
--- a/src/main/java/com/auth0/client/mgmt/AsyncRawOrganizationsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/AsyncRawOrganizationsClient.java
@@ -136,6 +136,8 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Organizati
         HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
                 .newBuilder()
                 .addPathSegments("organizations");
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
@@ -145,6 +147,13 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Organizati
             QueryStringMapper.addQueryParameter(
                     httpUrl, "sort", request.getSort().orElse(null), false);
         }
+        if (!request.getIncludeClientAssociationFor().isAbsent()) {
+            QueryStringMapper.addQueryParameter(
+                    httpUrl,
+                    "include_client_association_for",
+                    request.getIncludeClientAssociationFor().orElse(null),
+                    false);
+        }
         if (requestOptions != null) {
             requestOptions.getQueryParameters().forEach((_key, _value) -> {
                 httpUrl.addQueryParameter(_key, _value);
diff --git a/src/main/java/com/auth0/client/mgmt/AsyncRawRolesClient.java b/src/main/java/com/auth0/client/mgmt/AsyncRawRolesClient.java
index aab7c44e..3dcebd15 100644
--- a/src/main/java/com/auth0/client/mgmt/AsyncRawRolesClient.java
+++ b/src/main/java/com/auth0/client/mgmt/AsyncRawRolesClient.java
@@ -94,6 +94,14 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Role>>> li
             QueryStringMapper.addQueryParameter(
                     httpUrl, "name_filter", request.getNameFilter().orElse(null), false);
         }
+        if (!request.getType().isAbsent()) {
+            QueryStringMapper.addQueryParameter(
+                    httpUrl, "type", request.getType().orElse(null), false);
+        }
+        if (!request.getOwnerId().isAbsent()) {
+            QueryStringMapper.addQueryParameter(
+                    httpUrl, "owner_id", request.getOwnerId().orElse(null), false);
+        }
         if (requestOptions != null) {
             requestOptions.getQueryParameters().forEach((_key, _value) -> {
                 httpUrl.addQueryParameter(_key, _value);
diff --git a/src/main/java/com/auth0/client/mgmt/ManagementApi.java b/src/main/java/com/auth0/client/mgmt/ManagementApi.java
index 7e28f9f7..d17fb3c1 100644
--- a/src/main/java/com/auth0/client/mgmt/ManagementApi.java
+++ b/src/main/java/com/auth0/client/mgmt/ManagementApi.java
@@ -20,6 +20,8 @@ public class ManagementApi {
 
     protected final Supplier<ActionsClient> actionsClient;
 
+    protected final Supplier<AgentsClient> agentsClient;
+
     protected final Supplier<BrandingClient> brandingClient;
 
     protected final Supplier<ClientGrantsClient> clientGrantsClient;
@@ -111,6 +113,7 @@ public class ManagementApi {
     public ManagementApi(ClientOptions clientOptions) {
         this.clientOptions = clientOptions;
         this.actionsClient = Suppliers.memoize(() -> new ActionsClient(clientOptions));
+        this.agentsClient = Suppliers.memoize(() -> new AgentsClient(clientOptions));
         this.brandingClient = Suppliers.memoize(() -> new BrandingClient(clientOptions));
         this.clientGrantsClient = Suppliers.memoize(() -> new ClientGrantsClient(clientOptions));
         this.clientsClient = Suppliers.memoize(() -> new ClientsClient(clientOptions));
@@ -161,6 +164,10 @@ public ActionsClient actions() {
         return this.actionsClient.get();
     }
 
+    public AgentsClient agents() {
+        return this.agentsClient.get();
+    }
+
     public BrandingClient branding() {
         return this.brandingClient.get();
     }
diff --git a/src/main/java/com/auth0/client/mgmt/OrganizationsClient.java b/src/main/java/com/auth0/client/mgmt/OrganizationsClient.java
index 74ed88d6..f50ee76c 100644
--- a/src/main/java/com/auth0/client/mgmt/OrganizationsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/OrganizationsClient.java
@@ -8,6 +8,7 @@
 import com.auth0.client.mgmt.core.Suppliers;
 import com.auth0.client.mgmt.core.SyncPagingIterable;
 import com.auth0.client.mgmt.organizations.ClientGrantsClient;
+import com.auth0.client.mgmt.organizations.ClientsClient;
 import com.auth0.client.mgmt.organizations.ConnectionsClient;
 import com.auth0.client.mgmt.organizations.DiscoveryDomainsClient;
 import com.auth0.client.mgmt.organizations.EnabledConnectionsClient;
@@ -32,6 +33,8 @@ public class OrganizationsClient {
 
     protected final Supplier<ClientGrantsClient> clientGrantsClient;
 
+    protected final Supplier<ClientsClient> clientsClient;
+
     protected final Supplier<ConnectionsClient> connectionsClient;
 
     protected final Supplier<DiscoveryDomainsClient> discoveryDomainsClient;
@@ -50,6 +53,7 @@ public OrganizationsClient(ClientOptions clientOptions) {
         this.clientOptions = clientOptions;
         this.rawClient = new RawOrganizationsClient(clientOptions);
         this.clientGrantsClient = Suppliers.memoize(() -> new ClientGrantsClient(clientOptions));
+        this.clientsClient = Suppliers.memoize(() -> new ClientsClient(clientOptions));
         this.connectionsClient = Suppliers.memoize(() -> new ConnectionsClient(clientOptions));
         this.discoveryDomainsClient = Suppliers.memoize(() -> new DiscoveryDomainsClient(clientOptions));
         this.enabledConnectionsClient = Suppliers.memoize(() -> new EnabledConnectionsClient(clientOptions));
@@ -239,6 +243,10 @@ public ClientGrantsClient clientGrants() {
         return this.clientGrantsClient.get();
     }
 
+    public ClientsClient clients() {
+        return this.clientsClient.get();
+    }
+
     public ConnectionsClient connections() {
         return this.connectionsClient.get();
     }
diff --git a/src/main/java/com/auth0/client/mgmt/RawAgentsClient.java b/src/main/java/com/auth0/client/mgmt/RawAgentsClient.java
new file mode 100644
index 00000000..f6db6d9a
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/RawAgentsClient.java
@@ -0,0 +1,483 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt;
+
+import com.auth0.client.mgmt.core.ClientOptions;
+import com.auth0.client.mgmt.core.ManagementApiException;
+import com.auth0.client.mgmt.core.ManagementApiHttpResponse;
+import com.auth0.client.mgmt.core.ManagementException;
+import com.auth0.client.mgmt.core.MediaTypes;
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.core.QueryStringMapper;
+import com.auth0.client.mgmt.core.RequestOptions;
+import com.auth0.client.mgmt.core.RetryInterceptor;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
+import com.auth0.client.mgmt.errors.BadRequestError;
+import com.auth0.client.mgmt.errors.ConflictError;
+import com.auth0.client.mgmt.errors.ForbiddenError;
+import com.auth0.client.mgmt.errors.NotFoundError;
+import com.auth0.client.mgmt.errors.TooManyRequestsError;
+import com.auth0.client.mgmt.errors.UnauthorizedError;
+import com.auth0.client.mgmt.types.AgentResponseContent;
+import com.auth0.client.mgmt.types.CreateAgentRequestContent;
+import com.auth0.client.mgmt.types.ListAgentsRequestParameters;
+import com.auth0.client.mgmt.types.ListAgentsResponseContent;
+import com.auth0.client.mgmt.types.PatchAgentRequestParameters;
+import com.fasterxml.jackson.core.JsonProcessingException;
+import java.io.IOException;
+import java.util.List;
+import java.util.Optional;
+import okhttp3.Headers;
+import okhttp3.HttpUrl;
+import okhttp3.OkHttpClient;
+import okhttp3.Request;
+import okhttp3.RequestBody;
+import okhttp3.Response;
+import okhttp3.ResponseBody;
+
+public class RawAgentsClient {
+    protected final ClientOptions clientOptions;
+
+    public RawAgentsClient(ClientOptions clientOptions) {
+        this.clientOptions = clientOptions;
+    }
+
+    /**
+     * Get agents
+     */
+    public ManagementApiHttpResponse<SyncPagingIterable<AgentResponseContent>> list() {
+        return list(ListAgentsRequestParameters.builder().build());
+    }
+
+    /**
+     * Get agents
+     */
+    public ManagementApiHttpResponse<SyncPagingIterable<AgentResponseContent>> list(RequestOptions requestOptions) {
+        return list(ListAgentsRequestParameters.builder().build(), requestOptions);
+    }
+
+    /**
+     * Get agents
+     */
+    public ManagementApiHttpResponse<SyncPagingIterable<AgentResponseContent>> list(
+            ListAgentsRequestParameters request) {
+        return list(request, null);
+    }
+
+    /**
+     * Get agents
+     */
+    public ManagementApiHttpResponse<SyncPagingIterable<AgentResponseContent>> list(
+            ListAgentsRequestParameters request, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("agents");
+        if (!request.getFrom().isAbsent()) {
+            QueryStringMapper.addQueryParameter(
+                    httpUrl, "from", request.getFrom().orElse(null), false);
+        }
+        QueryStringMapper.addQueryParameter(httpUrl, "take", request.getTake().orElse(50), false);
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        Request.Builder _requestBuilder = new Request.Builder()
+                .url(httpUrl.build())
+                .method("GET", null)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Accept", "application/json");
+        Request okhttpRequest = _requestBuilder.build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        try (Response response = client.newCall(okhttpRequest).execute()) {
+            ResponseBody responseBody = response.body();
+            String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+            if (response.isSuccessful()) {
+                ListAgentsResponseContent parsedResponse =
+                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, ListAgentsResponseContent.class);
+                Optional<String> startingAfter = parsedResponse.getNext();
+                ListAgentsRequestParameters nextRequest = ListAgentsRequestParameters.builder()
+                        .from(request)
+                        .from(startingAfter)
+                        .build();
+                List<AgentResponseContent> result = parsedResponse.getAgents();
+                return new ManagementApiHttpResponse<>(
+                        new SyncPagingIterable<AgentResponseContent>(
+                                startingAfter.isPresent(), result, parsedResponse, () -> list(
+                                                nextRequest, requestOptions)
+                                        .body()),
+                        response);
+            }
+            try {
+                switch (response.code()) {
+                    case 400:
+                        throw new BadRequestError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 401:
+                        throw new UnauthorizedError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 403:
+                        throw new ForbiddenError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 429:
+                        throw new TooManyRequestsError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                }
+            } catch (JsonProcessingException ignored) {
+                // unable to map error response, throwing generic error
+            }
+            Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+            throw new ManagementApiException(
+                    "Error with status code " + response.code(), response.code(), errorBody, response);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to deserialize response: " + e.getMessage(), e);
+        } catch (IOException e) {
+            throw new ManagementException("Network error executing HTTP request", e);
+        }
+    }
+
+    /**
+     * Create an agent
+     */
+    public ManagementApiHttpResponse<AgentResponseContent> create(CreateAgentRequestContent request) {
+        return create(request, null);
+    }
+
+    /**
+     * Create an agent
+     */
+    public ManagementApiHttpResponse<AgentResponseContent> create(
+            CreateAgentRequestContent request, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("agents");
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        RequestBody body;
+        try {
+            body = RequestBody.create(
+                    ObjectMappers.JSON_MAPPER.writeValueAsBytes(request), MediaTypes.APPLICATION_JSON);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to serialize request", e);
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("POST", body)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Content-Type", "application/json")
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        try (Response response = client.newCall(okhttpRequest).execute()) {
+            ResponseBody responseBody = response.body();
+            String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+            if (response.isSuccessful()) {
+                return new ManagementApiHttpResponse<>(
+                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, AgentResponseContent.class), response);
+            }
+            try {
+                switch (response.code()) {
+                    case 400:
+                        throw new BadRequestError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 401:
+                        throw new UnauthorizedError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 403:
+                        throw new ForbiddenError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 409:
+                        throw new ConflictError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 429:
+                        throw new TooManyRequestsError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                }
+            } catch (JsonProcessingException ignored) {
+                // unable to map error response, throwing generic error
+            }
+            Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+            throw new ManagementApiException(
+                    "Error with status code " + response.code(), response.code(), errorBody, response);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to deserialize response: " + e.getMessage(), e);
+        } catch (IOException e) {
+            throw new ManagementException("Network error executing HTTP request", e);
+        }
+    }
+
+    /**
+     * Get an agent
+     */
+    public ManagementApiHttpResponse<AgentResponseContent> read(String id) {
+        return read(id, null);
+    }
+
+    /**
+     * Get an agent
+     */
+    public ManagementApiHttpResponse<AgentResponseContent> read(String id, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("agents")
+                .addPathSegment(id);
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("GET", null)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        try (Response response = client.newCall(okhttpRequest).execute()) {
+            ResponseBody responseBody = response.body();
+            String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+            if (response.isSuccessful()) {
+                return new ManagementApiHttpResponse<>(
+                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, AgentResponseContent.class), response);
+            }
+            try {
+                switch (response.code()) {
+                    case 401:
+                        throw new UnauthorizedError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 403:
+                        throw new ForbiddenError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 404:
+                        throw new NotFoundError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 429:
+                        throw new TooManyRequestsError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                }
+            } catch (JsonProcessingException ignored) {
+                // unable to map error response, throwing generic error
+            }
+            Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+            throw new ManagementApiException(
+                    "Error with status code " + response.code(), response.code(), errorBody, response);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to deserialize response: " + e.getMessage(), e);
+        } catch (IOException e) {
+            throw new ManagementException("Network error executing HTTP request", e);
+        }
+    }
+
+    /**
+     * Delete an agent
+     */
+    public ManagementApiHttpResponse<Void> delete(String id) {
+        return delete(id, null);
+    }
+
+    /**
+     * Delete an agent
+     */
+    public ManagementApiHttpResponse<Void> delete(String id, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("agents")
+                .addPathSegment(id);
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("DELETE", null)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        try (Response response = client.newCall(okhttpRequest).execute()) {
+            ResponseBody responseBody = response.body();
+            if (response.isSuccessful()) {
+                return new ManagementApiHttpResponse<>(null, response);
+            }
+            String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+            try {
+                switch (response.code()) {
+                    case 400:
+                        throw new BadRequestError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 401:
+                        throw new UnauthorizedError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 403:
+                        throw new ForbiddenError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 429:
+                        throw new TooManyRequestsError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                }
+            } catch (JsonProcessingException ignored) {
+                // unable to map error response, throwing generic error
+            }
+            Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+            throw new ManagementApiException(
+                    "Error with status code " + response.code(), response.code(), errorBody, response);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to deserialize response: " + e.getMessage(), e);
+        } catch (IOException e) {
+            throw new ManagementException("Network error executing HTTP request", e);
+        }
+    }
+
+    /**
+     * Update an agent
+     */
+    public ManagementApiHttpResponse<AgentResponseContent> update(String id) {
+        return update(id, PatchAgentRequestParameters.builder().build());
+    }
+
+    /**
+     * Update an agent
+     */
+    public ManagementApiHttpResponse<AgentResponseContent> update(String id, RequestOptions requestOptions) {
+        return update(id, PatchAgentRequestParameters.builder().build(), requestOptions);
+    }
+
+    /**
+     * Update an agent
+     */
+    public ManagementApiHttpResponse<AgentResponseContent> update(String id, PatchAgentRequestParameters request) {
+        return update(id, request, null);
+    }
+
+    /**
+     * Update an agent
+     */
+    public ManagementApiHttpResponse<AgentResponseContent> update(
+            String id, PatchAgentRequestParameters request, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("agents")
+                .addPathSegment(id);
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        RequestBody body;
+        try {
+            body = RequestBody.create(
+                    ObjectMappers.JSON_MAPPER.writeValueAsBytes(request), MediaTypes.APPLICATION_JSON);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to serialize request", e);
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("PATCH", body)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Content-Type", "application/json")
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        try (Response response = client.newCall(okhttpRequest).execute()) {
+            ResponseBody responseBody = response.body();
+            String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+            if (response.isSuccessful()) {
+                return new ManagementApiHttpResponse<>(
+                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, AgentResponseContent.class), response);
+            }
+            try {
+                switch (response.code()) {
+                    case 400:
+                        throw new BadRequestError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 401:
+                        throw new UnauthorizedError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 403:
+                        throw new ForbiddenError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 404:
+                        throw new NotFoundError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 429:
+                        throw new TooManyRequestsError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                }
+            } catch (JsonProcessingException ignored) {
+                // unable to map error response, throwing generic error
+            }
+            Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+            throw new ManagementApiException(
+                    "Error with status code " + response.code(), response.code(), errorBody, response);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to deserialize response: " + e.getMessage(), e);
+        } catch (IOException e) {
+            throw new ManagementException("Network error executing HTTP request", e);
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/RawClientGrantsClient.java b/src/main/java/com/auth0/client/mgmt/RawClientGrantsClient.java
index e9b648f7..2be177c5 100644
--- a/src/main/java/com/auth0/client/mgmt/RawClientGrantsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/RawClientGrantsClient.java
@@ -78,6 +78,8 @@ public ManagementApiHttpResponse<SyncPagingIterable<ClientGrantResponseContent>>
         HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
                 .newBuilder()
                 .addPathSegments("client-grants");
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/RawConnectionsClient.java b/src/main/java/com/auth0/client/mgmt/RawConnectionsClient.java
index 5919c8e3..62341fdc 100644
--- a/src/main/java/com/auth0/client/mgmt/RawConnectionsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/RawConnectionsClient.java
@@ -130,6 +130,8 @@ public ManagementApiHttpResponse<SyncPagingIterable<ConnectionForList>> list(
         HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
                 .newBuilder()
                 .addPathSegments("connections");
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/RawGroupsClient.java b/src/main/java/com/auth0/client/mgmt/RawGroupsClient.java
index 9c75aa17..02566f9c 100644
--- a/src/main/java/com/auth0/client/mgmt/RawGroupsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/RawGroupsClient.java
@@ -92,6 +92,8 @@ public ManagementApiHttpResponse<SyncPagingIterable<Group>> list(
             QueryStringMapper.addQueryParameter(
                     httpUrl, "include_fields", request.getIncludeFields().orElse(null), false);
         }
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/RawOrganizationsClient.java b/src/main/java/com/auth0/client/mgmt/RawOrganizationsClient.java
index 09bb80b3..d1203604 100644
--- a/src/main/java/com/auth0/client/mgmt/RawOrganizationsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/RawOrganizationsClient.java
@@ -130,6 +130,8 @@ public ManagementApiHttpResponse<SyncPagingIterable<Organization>> list(
         HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
                 .newBuilder()
                 .addPathSegments("organizations");
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
@@ -139,6 +141,13 @@ public ManagementApiHttpResponse<SyncPagingIterable<Organization>> list(
             QueryStringMapper.addQueryParameter(
                     httpUrl, "sort", request.getSort().orElse(null), false);
         }
+        if (!request.getIncludeClientAssociationFor().isAbsent()) {
+            QueryStringMapper.addQueryParameter(
+                    httpUrl,
+                    "include_client_association_for",
+                    request.getIncludeClientAssociationFor().orElse(null),
+                    false);
+        }
         if (requestOptions != null) {
             requestOptions.getQueryParameters().forEach((_key, _value) -> {
                 httpUrl.addQueryParameter(_key, _value);
diff --git a/src/main/java/com/auth0/client/mgmt/RawRolesClient.java b/src/main/java/com/auth0/client/mgmt/RawRolesClient.java
index c5a37c59..ea7eb9ec 100644
--- a/src/main/java/com/auth0/client/mgmt/RawRolesClient.java
+++ b/src/main/java/com/auth0/client/mgmt/RawRolesClient.java
@@ -88,6 +88,14 @@ public ManagementApiHttpResponse<SyncPagingIterable<Role>> list(
             QueryStringMapper.addQueryParameter(
                     httpUrl, "name_filter", request.getNameFilter().orElse(null), false);
         }
+        if (!request.getType().isAbsent()) {
+            QueryStringMapper.addQueryParameter(
+                    httpUrl, "type", request.getType().orElse(null), false);
+        }
+        if (!request.getOwnerId().isAbsent()) {
+            QueryStringMapper.addQueryParameter(
+                    httpUrl, "owner_id", request.getOwnerId().orElse(null), false);
+        }
         if (requestOptions != null) {
             requestOptions.getQueryParameters().forEach((_key, _value) -> {
                 httpUrl.addQueryParameter(_key, _value);
diff --git a/src/main/java/com/auth0/client/mgmt/clientgrants/AsyncRawOrganizationsClient.java b/src/main/java/com/auth0/client/mgmt/clientgrants/AsyncRawOrganizationsClient.java
index ae436b51..f838836e 100644
--- a/src/main/java/com/auth0/client/mgmt/clientgrants/AsyncRawOrganizationsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/clientgrants/AsyncRawOrganizationsClient.java
@@ -65,6 +65,8 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Organizati
                 .addPathSegments("client-grants")
                 .addPathSegment(id)
                 .addPathSegments("organizations");
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/clientgrants/RawOrganizationsClient.java b/src/main/java/com/auth0/client/mgmt/clientgrants/RawOrganizationsClient.java
index 3037d605..affba07b 100644
--- a/src/main/java/com/auth0/client/mgmt/clientgrants/RawOrganizationsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/clientgrants/RawOrganizationsClient.java
@@ -59,6 +59,8 @@ public ManagementApiHttpResponse<SyncPagingIterable<Organization>> list(
                 .addPathSegments("client-grants")
                 .addPathSegment(id)
                 .addPathSegments("organizations");
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/clientgrants/types/ListClientGrantOrganizationsRequestParameters.java b/src/main/java/com/auth0/client/mgmt/clientgrants/types/ListClientGrantOrganizationsRequestParameters.java
index be8f7751..9de18ba9 100644
--- a/src/main/java/com/auth0/client/mgmt/clientgrants/types/ListClientGrantOrganizationsRequestParameters.java
+++ b/src/main/java/com/auth0/client/mgmt/clientgrants/types/ListClientGrantOrganizationsRequestParameters.java
@@ -23,6 +23,8 @@
 @JsonInclude(JsonInclude.Include.NON_ABSENT)
 @JsonDeserialize(builder = ListClientGrantOrganizationsRequestParameters.Builder.class)
 public final class ListClientGrantOrganizationsRequestParameters {
+    private final OptionalNullable<Boolean> includeTotals;
+
     private final OptionalNullable<String> from;
 
     private final OptionalNullable<Integer> take;
@@ -30,12 +32,28 @@ public final class ListClientGrantOrganizationsRequestParameters {
     private final Map<String, Object> additionalProperties;
 
     private ListClientGrantOrganizationsRequestParameters(
-            OptionalNullable<String> from, OptionalNullable<Integer> take, Map<String, Object> additionalProperties) {
+            OptionalNullable<Boolean> includeTotals,
+            OptionalNullable<String> from,
+            OptionalNullable<Integer> take,
+            Map<String, Object> additionalProperties) {
+        this.includeTotals = includeTotals;
         this.from = from;
         this.take = take;
         this.additionalProperties = additionalProperties;
     }
 
+    /**
+     * @return Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    public OptionalNullable<Boolean> getIncludeTotals() {
+        if (includeTotals == null) {
+            return OptionalNullable.absent();
+        }
+        return includeTotals;
+    }
+
     /**
      * @return Optional Id from which to start selection.
      */
@@ -60,6 +78,12 @@ public OptionalNullable<Integer> getTake() {
         return take;
     }
 
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    private OptionalNullable<Boolean> _getIncludeTotals() {
+        return includeTotals;
+    }
+
     @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
     @JsonProperty("from")
     private OptionalNullable<String> _getFrom() {
@@ -85,12 +109,12 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(ListClientGrantOrganizationsRequestParameters other) {
-        return from.equals(other.from) && take.equals(other.take);
+        return includeTotals.equals(other.includeTotals) && from.equals(other.from) && take.equals(other.take);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.from, this.take);
+        return Objects.hash(this.includeTotals, this.from, this.take);
     }
 
     @java.lang.Override
@@ -104,6 +128,8 @@ public static Builder builder() {
 
     @JsonIgnoreProperties(ignoreUnknown = true)
     public static final class Builder {
+        private OptionalNullable<Boolean> includeTotals = OptionalNullable.absent();
+
         private OptionalNullable<String> from = OptionalNullable.absent();
 
         private OptionalNullable<Integer> take = OptionalNullable.absent();
@@ -114,11 +140,46 @@ public static final class Builder {
         private Builder() {}
 
         public Builder from(ListClientGrantOrganizationsRequestParameters other) {
+            includeTotals(other.getIncludeTotals());
             from(other.getFrom());
             take(other.getTake());
             return this;
         }
 
+        /**
+         * <p>Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).</p>
+         */
+        @JsonSetter(value = "include_totals", nulls = Nulls.SKIP)
+        public Builder includeTotals(@Nullable OptionalNullable<Boolean> includeTotals) {
+            this.includeTotals = includeTotals;
+            return this;
+        }
+
+        public Builder includeTotals(Boolean includeTotals) {
+            this.includeTotals = OptionalNullable.of(includeTotals);
+            return this;
+        }
+
+        public Builder includeTotals(Optional<Boolean> includeTotals) {
+            if (includeTotals.isPresent()) {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            } else {
+                this.includeTotals = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder includeTotals(com.auth0.client.mgmt.core.Nullable<Boolean> includeTotals) {
+            if (includeTotals.isNull()) {
+                this.includeTotals = OptionalNullable.ofNull();
+            } else if (includeTotals.isEmpty()) {
+                this.includeTotals = OptionalNullable.absent();
+            } else {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            }
+            return this;
+        }
+
         /**
          * <p>Optional Id from which to start selection.</p>
          */
@@ -188,7 +249,7 @@ public Builder take(com.auth0.client.mgmt.core.Nullable<Integer> take) {
         }
 
         public ListClientGrantOrganizationsRequestParameters build() {
-            return new ListClientGrantOrganizationsRequestParameters(from, take, additionalProperties);
+            return new ListClientGrantOrganizationsRequestParameters(includeTotals, from, take, additionalProperties);
         }
 
         public Builder additionalProperty(String key, Object value) {
diff --git a/src/main/java/com/auth0/client/mgmt/connections/AsyncDirectoryProvisioningClient.java b/src/main/java/com/auth0/client/mgmt/connections/AsyncDirectoryProvisioningClient.java
index 94cf3256..a7526405 100644
--- a/src/main/java/com/auth0/client/mgmt/connections/AsyncDirectoryProvisioningClient.java
+++ b/src/main/java/com/auth0/client/mgmt/connections/AsyncDirectoryProvisioningClient.java
@@ -4,6 +4,8 @@
 package com.auth0.client.mgmt.connections;
 
 import com.auth0.client.mgmt.connections.directoryprovisioning.AsyncSynchronizationsClient;
+import com.auth0.client.mgmt.connections.types.AddSynchronizedGroupsRequestContent;
+import com.auth0.client.mgmt.connections.types.DeleteSynchronizedGroupsRequestContent;
 import com.auth0.client.mgmt.connections.types.ListDirectoryProvisioningsRequestParameters;
 import com.auth0.client.mgmt.connections.types.ListSynchronizedGroupsRequestParameters;
 import com.auth0.client.mgmt.connections.types.ReplaceSynchronizedGroupsRequestContent;
@@ -215,6 +217,24 @@ public CompletableFuture<SyncPagingIterable<SynchronizedGroupPayload>> listSynch
                 .thenApply(response -> response.body());
     }
 
+    /**
+     * Add synchronized group selections to a directory provisioning configuration.
+     */
+    public CompletableFuture<Void> addSynchronizedGroupSelections(
+            String id, AddSynchronizedGroupsRequestContent request) {
+        return this.rawClient.addSynchronizedGroupSelections(id, request).thenApply(response -> response.body());
+    }
+
+    /**
+     * Add synchronized group selections to a directory provisioning configuration.
+     */
+    public CompletableFuture<Void> addSynchronizedGroupSelections(
+            String id, AddSynchronizedGroupsRequestContent request, RequestOptions requestOptions) {
+        return this.rawClient
+                .addSynchronizedGroupSelections(id, request, requestOptions)
+                .thenApply(response -> response.body());
+    }
+
     /**
      * Create or replace the selected groups for a connection directory provisioning configuration.
      */
@@ -230,6 +250,24 @@ public CompletableFuture<Void> set(
         return this.rawClient.set(id, request, requestOptions).thenApply(response -> response.body());
     }
 
+    /**
+     * Delete synchronized group selections for a directory provisioning configuration
+     */
+    public CompletableFuture<Void> deleteSynchronizedGroupSelections(
+            String id, DeleteSynchronizedGroupsRequestContent request) {
+        return this.rawClient.deleteSynchronizedGroupSelections(id, request).thenApply(response -> response.body());
+    }
+
+    /**
+     * Delete synchronized group selections for a directory provisioning configuration
+     */
+    public CompletableFuture<Void> deleteSynchronizedGroupSelections(
+            String id, DeleteSynchronizedGroupsRequestContent request, RequestOptions requestOptions) {
+        return this.rawClient
+                .deleteSynchronizedGroupSelections(id, request, requestOptions)
+                .thenApply(response -> response.body());
+    }
+
     public AsyncSynchronizationsClient synchronizations() {
         return this.synchronizationsClient.get();
     }
diff --git a/src/main/java/com/auth0/client/mgmt/connections/AsyncRawDirectoryProvisioningClient.java b/src/main/java/com/auth0/client/mgmt/connections/AsyncRawDirectoryProvisioningClient.java
index 5d947ecb..e12a95bf 100644
--- a/src/main/java/com/auth0/client/mgmt/connections/AsyncRawDirectoryProvisioningClient.java
+++ b/src/main/java/com/auth0/client/mgmt/connections/AsyncRawDirectoryProvisioningClient.java
@@ -3,6 +3,8 @@
  */
 package com.auth0.client.mgmt.connections;
 
+import com.auth0.client.mgmt.connections.types.AddSynchronizedGroupsRequestContent;
+import com.auth0.client.mgmt.connections.types.DeleteSynchronizedGroupsRequestContent;
 import com.auth0.client.mgmt.connections.types.ListDirectoryProvisioningsRequestParameters;
 import com.auth0.client.mgmt.connections.types.ListSynchronizedGroupsRequestParameters;
 import com.auth0.client.mgmt.connections.types.ReplaceSynchronizedGroupsRequestContent;
@@ -828,6 +830,9 @@ public void onFailure(@NotNull Call call, @NotNull IOException e) {
                     httpUrl, "from", request.getFrom().orElse(null), false);
         }
         QueryStringMapper.addQueryParameter(httpUrl, "take", request.getTake().orElse(50), false);
+        if (!request.getQ().isAbsent()) {
+            QueryStringMapper.addQueryParameter(httpUrl, "q", request.getQ().orElse(null), false);
+        }
         if (requestOptions != null) {
             requestOptions.getQueryParameters().forEach((_key, _value) -> {
                 httpUrl.addQueryParameter(_key, _value);
@@ -934,6 +939,118 @@ public void onFailure(@NotNull Call call, @NotNull IOException e) {
         return future;
     }
 
+    /**
+     * Add synchronized group selections to a directory provisioning configuration.
+     */
+    public CompletableFuture<ManagementApiHttpResponse<Void>> addSynchronizedGroupSelections(
+            String id, AddSynchronizedGroupsRequestContent request) {
+        return addSynchronizedGroupSelections(id, request, null);
+    }
+
+    /**
+     * Add synchronized group selections to a directory provisioning configuration.
+     */
+    public CompletableFuture<ManagementApiHttpResponse<Void>> addSynchronizedGroupSelections(
+            String id, AddSynchronizedGroupsRequestContent request, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("connections")
+                .addPathSegment(id)
+                .addPathSegments("directory-provisioning")
+                .addPathSegments("synchronized-groups");
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        RequestBody body;
+        try {
+            body = RequestBody.create(
+                    ObjectMappers.JSON_MAPPER.writeValueAsBytes(request), MediaTypes.APPLICATION_JSON);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to serialize request", e);
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("POST", body)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Content-Type", "application/json")
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        CompletableFuture<ManagementApiHttpResponse<Void>> future = new CompletableFuture<>();
+        client.newCall(okhttpRequest).enqueue(new Callback() {
+            @Override
+            public void onResponse(@NotNull Call call, @NotNull Response response) throws IOException {
+                try (ResponseBody responseBody = response.body()) {
+                    if (response.isSuccessful()) {
+                        future.complete(new ManagementApiHttpResponse<>(null, response));
+                        return;
+                    }
+                    String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+                    try {
+                        switch (response.code()) {
+                            case 400:
+                                future.completeExceptionally(new BadRequestError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 401:
+                                future.completeExceptionally(new UnauthorizedError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 403:
+                                future.completeExceptionally(new ForbiddenError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 404:
+                                future.completeExceptionally(new NotFoundError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 429:
+                                future.completeExceptionally(new TooManyRequestsError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                        }
+                    } catch (JsonProcessingException ignored) {
+                        // unable to map error response, throwing generic error
+                    }
+                    Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+                    future.completeExceptionally(new ManagementApiException(
+                            "Error with status code " + response.code(), response.code(), errorBody, response));
+                    return;
+                } catch (JsonProcessingException e) {
+                    future.completeExceptionally(
+                            new ManagementException("Failed to deserialize response: " + e.getMessage(), e));
+                } catch (IOException e) {
+                    future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+                }
+            }
+
+            @Override
+            public void onFailure(@NotNull Call call, @NotNull IOException e) {
+                future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+            }
+        });
+        return future;
+    }
+
     /**
      * Create or replace the selected groups for a connection directory provisioning configuration.
      */
@@ -1050,4 +1167,116 @@ public void onFailure(@NotNull Call call, @NotNull IOException e) {
         });
         return future;
     }
+
+    /**
+     * Delete synchronized group selections for a directory provisioning configuration
+     */
+    public CompletableFuture<ManagementApiHttpResponse<Void>> deleteSynchronizedGroupSelections(
+            String id, DeleteSynchronizedGroupsRequestContent request) {
+        return deleteSynchronizedGroupSelections(id, request, null);
+    }
+
+    /**
+     * Delete synchronized group selections for a directory provisioning configuration
+     */
+    public CompletableFuture<ManagementApiHttpResponse<Void>> deleteSynchronizedGroupSelections(
+            String id, DeleteSynchronizedGroupsRequestContent request, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("connections")
+                .addPathSegment(id)
+                .addPathSegments("directory-provisioning")
+                .addPathSegments("synchronized-groups");
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        RequestBody body;
+        try {
+            body = RequestBody.create(
+                    ObjectMappers.JSON_MAPPER.writeValueAsBytes(request), MediaTypes.APPLICATION_JSON);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to serialize request", e);
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("DELETE", body)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Content-Type", "application/json")
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        CompletableFuture<ManagementApiHttpResponse<Void>> future = new CompletableFuture<>();
+        client.newCall(okhttpRequest).enqueue(new Callback() {
+            @Override
+            public void onResponse(@NotNull Call call, @NotNull Response response) throws IOException {
+                try (ResponseBody responseBody = response.body()) {
+                    if (response.isSuccessful()) {
+                        future.complete(new ManagementApiHttpResponse<>(null, response));
+                        return;
+                    }
+                    String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+                    try {
+                        switch (response.code()) {
+                            case 400:
+                                future.completeExceptionally(new BadRequestError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 401:
+                                future.completeExceptionally(new UnauthorizedError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 403:
+                                future.completeExceptionally(new ForbiddenError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 404:
+                                future.completeExceptionally(new NotFoundError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 429:
+                                future.completeExceptionally(new TooManyRequestsError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                        }
+                    } catch (JsonProcessingException ignored) {
+                        // unable to map error response, throwing generic error
+                    }
+                    Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+                    future.completeExceptionally(new ManagementApiException(
+                            "Error with status code " + response.code(), response.code(), errorBody, response));
+                    return;
+                } catch (JsonProcessingException e) {
+                    future.completeExceptionally(
+                            new ManagementException("Failed to deserialize response: " + e.getMessage(), e));
+                } catch (IOException e) {
+                    future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+                }
+            }
+
+            @Override
+            public void onFailure(@NotNull Call call, @NotNull IOException e) {
+                future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+            }
+        });
+        return future;
+    }
 }
diff --git a/src/main/java/com/auth0/client/mgmt/connections/DirectoryProvisioningClient.java b/src/main/java/com/auth0/client/mgmt/connections/DirectoryProvisioningClient.java
index 53333a62..f28bcc9d 100644
--- a/src/main/java/com/auth0/client/mgmt/connections/DirectoryProvisioningClient.java
+++ b/src/main/java/com/auth0/client/mgmt/connections/DirectoryProvisioningClient.java
@@ -4,6 +4,8 @@
 package com.auth0.client.mgmt.connections;
 
 import com.auth0.client.mgmt.connections.directoryprovisioning.SynchronizationsClient;
+import com.auth0.client.mgmt.connections.types.AddSynchronizedGroupsRequestContent;
+import com.auth0.client.mgmt.connections.types.DeleteSynchronizedGroupsRequestContent;
 import com.auth0.client.mgmt.connections.types.ListDirectoryProvisioningsRequestParameters;
 import com.auth0.client.mgmt.connections.types.ListSynchronizedGroupsRequestParameters;
 import com.auth0.client.mgmt.connections.types.ReplaceSynchronizedGroupsRequestContent;
@@ -211,6 +213,23 @@ public SyncPagingIterable<SynchronizedGroupPayload> listSynchronizedGroups(
                 .body();
     }
 
+    /**
+     * Add synchronized group selections to a directory provisioning configuration.
+     */
+    public void addSynchronizedGroupSelections(String id, AddSynchronizedGroupsRequestContent request) {
+        this.rawClient.addSynchronizedGroupSelections(id, request).body();
+    }
+
+    /**
+     * Add synchronized group selections to a directory provisioning configuration.
+     */
+    public void addSynchronizedGroupSelections(
+            String id, AddSynchronizedGroupsRequestContent request, RequestOptions requestOptions) {
+        this.rawClient
+                .addSynchronizedGroupSelections(id, request, requestOptions)
+                .body();
+    }
+
     /**
      * Create or replace the selected groups for a connection directory provisioning configuration.
      */
@@ -225,6 +244,23 @@ public void set(String id, ReplaceSynchronizedGroupsRequestContent request, Requ
         this.rawClient.set(id, request, requestOptions).body();
     }
 
+    /**
+     * Delete synchronized group selections for a directory provisioning configuration
+     */
+    public void deleteSynchronizedGroupSelections(String id, DeleteSynchronizedGroupsRequestContent request) {
+        this.rawClient.deleteSynchronizedGroupSelections(id, request).body();
+    }
+
+    /**
+     * Delete synchronized group selections for a directory provisioning configuration
+     */
+    public void deleteSynchronizedGroupSelections(
+            String id, DeleteSynchronizedGroupsRequestContent request, RequestOptions requestOptions) {
+        this.rawClient
+                .deleteSynchronizedGroupSelections(id, request, requestOptions)
+                .body();
+    }
+
     public SynchronizationsClient synchronizations() {
         return this.synchronizationsClient.get();
     }
diff --git a/src/main/java/com/auth0/client/mgmt/connections/RawDirectoryProvisioningClient.java b/src/main/java/com/auth0/client/mgmt/connections/RawDirectoryProvisioningClient.java
index 4c30b1a0..4350c901 100644
--- a/src/main/java/com/auth0/client/mgmt/connections/RawDirectoryProvisioningClient.java
+++ b/src/main/java/com/auth0/client/mgmt/connections/RawDirectoryProvisioningClient.java
@@ -3,6 +3,8 @@
  */
 package com.auth0.client.mgmt.connections;
 
+import com.auth0.client.mgmt.connections.types.AddSynchronizedGroupsRequestContent;
+import com.auth0.client.mgmt.connections.types.DeleteSynchronizedGroupsRequestContent;
 import com.auth0.client.mgmt.connections.types.ListDirectoryProvisioningsRequestParameters;
 import com.auth0.client.mgmt.connections.types.ListSynchronizedGroupsRequestParameters;
 import com.auth0.client.mgmt.connections.types.ReplaceSynchronizedGroupsRequestContent;
@@ -664,6 +666,9 @@ public ManagementApiHttpResponse<SyncPagingIterable<SynchronizedGroupPayload>> l
                     httpUrl, "from", request.getFrom().orElse(null), false);
         }
         QueryStringMapper.addQueryParameter(httpUrl, "take", request.getTake().orElse(50), false);
+        if (!request.getQ().isAbsent()) {
+            QueryStringMapper.addQueryParameter(httpUrl, "q", request.getQ().orElse(null), false);
+        }
         if (requestOptions != null) {
             requestOptions.getQueryParameters().forEach((_key, _value) -> {
                 httpUrl.addQueryParameter(_key, _value);
@@ -738,6 +743,94 @@ public ManagementApiHttpResponse<SyncPagingIterable<SynchronizedGroupPayload>> l
         }
     }
 
+    /**
+     * Add synchronized group selections to a directory provisioning configuration.
+     */
+    public ManagementApiHttpResponse<Void> addSynchronizedGroupSelections(
+            String id, AddSynchronizedGroupsRequestContent request) {
+        return addSynchronizedGroupSelections(id, request, null);
+    }
+
+    /**
+     * Add synchronized group selections to a directory provisioning configuration.
+     */
+    public ManagementApiHttpResponse<Void> addSynchronizedGroupSelections(
+            String id, AddSynchronizedGroupsRequestContent request, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("connections")
+                .addPathSegment(id)
+                .addPathSegments("directory-provisioning")
+                .addPathSegments("synchronized-groups");
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        RequestBody body;
+        try {
+            body = RequestBody.create(
+                    ObjectMappers.JSON_MAPPER.writeValueAsBytes(request), MediaTypes.APPLICATION_JSON);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to serialize request", e);
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("POST", body)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Content-Type", "application/json")
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        try (Response response = client.newCall(okhttpRequest).execute()) {
+            ResponseBody responseBody = response.body();
+            if (response.isSuccessful()) {
+                return new ManagementApiHttpResponse<>(null, response);
+            }
+            String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+            try {
+                switch (response.code()) {
+                    case 400:
+                        throw new BadRequestError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 401:
+                        throw new UnauthorizedError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 403:
+                        throw new ForbiddenError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 404:
+                        throw new NotFoundError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 429:
+                        throw new TooManyRequestsError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                }
+            } catch (JsonProcessingException ignored) {
+                // unable to map error response, throwing generic error
+            }
+            Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+            throw new ManagementApiException(
+                    "Error with status code " + response.code(), response.code(), errorBody, response);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to deserialize response: " + e.getMessage(), e);
+        } catch (IOException e) {
+            throw new ManagementException("Network error executing HTTP request", e);
+        }
+    }
+
     /**
      * Create or replace the selected groups for a connection directory provisioning configuration.
      */
@@ -827,4 +920,92 @@ public ManagementApiHttpResponse<Void> set(
             throw new ManagementException("Network error executing HTTP request", e);
         }
     }
+
+    /**
+     * Delete synchronized group selections for a directory provisioning configuration
+     */
+    public ManagementApiHttpResponse<Void> deleteSynchronizedGroupSelections(
+            String id, DeleteSynchronizedGroupsRequestContent request) {
+        return deleteSynchronizedGroupSelections(id, request, null);
+    }
+
+    /**
+     * Delete synchronized group selections for a directory provisioning configuration
+     */
+    public ManagementApiHttpResponse<Void> deleteSynchronizedGroupSelections(
+            String id, DeleteSynchronizedGroupsRequestContent request, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("connections")
+                .addPathSegment(id)
+                .addPathSegments("directory-provisioning")
+                .addPathSegments("synchronized-groups");
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        RequestBody body;
+        try {
+            body = RequestBody.create(
+                    ObjectMappers.JSON_MAPPER.writeValueAsBytes(request), MediaTypes.APPLICATION_JSON);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to serialize request", e);
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("DELETE", body)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Content-Type", "application/json")
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        try (Response response = client.newCall(okhttpRequest).execute()) {
+            ResponseBody responseBody = response.body();
+            if (response.isSuccessful()) {
+                return new ManagementApiHttpResponse<>(null, response);
+            }
+            String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+            try {
+                switch (response.code()) {
+                    case 400:
+                        throw new BadRequestError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 401:
+                        throw new UnauthorizedError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 403:
+                        throw new ForbiddenError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 404:
+                        throw new NotFoundError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 429:
+                        throw new TooManyRequestsError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                }
+            } catch (JsonProcessingException ignored) {
+                // unable to map error response, throwing generic error
+            }
+            Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+            throw new ManagementApiException(
+                    "Error with status code " + response.code(), response.code(), errorBody, response);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to deserialize response: " + e.getMessage(), e);
+        } catch (IOException e) {
+            throw new ManagementException("Network error executing HTTP request", e);
+        }
+    }
 }
diff --git a/src/main/java/com/auth0/client/mgmt/connections/types/AddSynchronizedGroupsRequestContent.java b/src/main/java/com/auth0/client/mgmt/connections/types/AddSynchronizedGroupsRequestContent.java
new file mode 100644
index 00000000..14325a61
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/connections/types/AddSynchronizedGroupsRequestContent.java
@@ -0,0 +1,125 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.connections.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.types.SynchronizedGroupPayload;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Objects;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = AddSynchronizedGroupsRequestContent.Builder.class)
+public final class AddSynchronizedGroupsRequestContent {
+    private final List<SynchronizedGroupPayload> groups;
+
+    private final Map<String, Object> additionalProperties;
+
+    private AddSynchronizedGroupsRequestContent(
+            List<SynchronizedGroupPayload> groups, Map<String, Object> additionalProperties) {
+        this.groups = groups;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return Array of Google Workspace Directory group objects to synchronize.
+     */
+    @JsonProperty("groups")
+    public List<SynchronizedGroupPayload> getGroups() {
+        return groups;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof AddSynchronizedGroupsRequestContent
+                && equalTo((AddSynchronizedGroupsRequestContent) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(AddSynchronizedGroupsRequestContent other) {
+        return groups.equals(other.groups);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.groups);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder {
+        private List<SynchronizedGroupPayload> groups = new ArrayList<>();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        public Builder from(AddSynchronizedGroupsRequestContent other) {
+            groups(other.getGroups());
+            return this;
+        }
+
+        /**
+         * <p>Array of Google Workspace Directory group objects to synchronize.</p>
+         */
+        @JsonSetter(value = "groups", nulls = Nulls.SKIP)
+        public Builder groups(List<SynchronizedGroupPayload> groups) {
+            this.groups.clear();
+            if (groups != null) {
+                this.groups.addAll(groups);
+            }
+            return this;
+        }
+
+        public Builder addGroups(SynchronizedGroupPayload groups) {
+            this.groups.add(groups);
+            return this;
+        }
+
+        public Builder addAllGroups(List<SynchronizedGroupPayload> groups) {
+            if (groups != null) {
+                this.groups.addAll(groups);
+            }
+            return this;
+        }
+
+        public AddSynchronizedGroupsRequestContent build() {
+            return new AddSynchronizedGroupsRequestContent(groups, additionalProperties);
+        }
+
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/connections/types/DeleteSynchronizedGroupsRequestContent.java b/src/main/java/com/auth0/client/mgmt/connections/types/DeleteSynchronizedGroupsRequestContent.java
new file mode 100644
index 00000000..5d5a7e1c
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/connections/types/DeleteSynchronizedGroupsRequestContent.java
@@ -0,0 +1,125 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.connections.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.types.SynchronizedGroupSelectionId;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Objects;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = DeleteSynchronizedGroupsRequestContent.Builder.class)
+public final class DeleteSynchronizedGroupsRequestContent {
+    private final List<SynchronizedGroupSelectionId> groups;
+
+    private final Map<String, Object> additionalProperties;
+
+    private DeleteSynchronizedGroupsRequestContent(
+            List<SynchronizedGroupSelectionId> groups, Map<String, Object> additionalProperties) {
+        this.groups = groups;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return Array of groups to remove from the selection set.
+     */
+    @JsonProperty("groups")
+    public List<SynchronizedGroupSelectionId> getGroups() {
+        return groups;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof DeleteSynchronizedGroupsRequestContent
+                && equalTo((DeleteSynchronizedGroupsRequestContent) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(DeleteSynchronizedGroupsRequestContent other) {
+        return groups.equals(other.groups);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.groups);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder {
+        private List<SynchronizedGroupSelectionId> groups = new ArrayList<>();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        public Builder from(DeleteSynchronizedGroupsRequestContent other) {
+            groups(other.getGroups());
+            return this;
+        }
+
+        /**
+         * <p>Array of groups to remove from the selection set.</p>
+         */
+        @JsonSetter(value = "groups", nulls = Nulls.SKIP)
+        public Builder groups(List<SynchronizedGroupSelectionId> groups) {
+            this.groups.clear();
+            if (groups != null) {
+                this.groups.addAll(groups);
+            }
+            return this;
+        }
+
+        public Builder addGroups(SynchronizedGroupSelectionId groups) {
+            this.groups.add(groups);
+            return this;
+        }
+
+        public Builder addAllGroups(List<SynchronizedGroupSelectionId> groups) {
+            if (groups != null) {
+                this.groups.addAll(groups);
+            }
+            return this;
+        }
+
+        public DeleteSynchronizedGroupsRequestContent build() {
+            return new DeleteSynchronizedGroupsRequestContent(groups, additionalProperties);
+        }
+
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/connections/types/ListSynchronizedGroupsRequestParameters.java b/src/main/java/com/auth0/client/mgmt/connections/types/ListSynchronizedGroupsRequestParameters.java
index 44183765..24870862 100644
--- a/src/main/java/com/auth0/client/mgmt/connections/types/ListSynchronizedGroupsRequestParameters.java
+++ b/src/main/java/com/auth0/client/mgmt/connections/types/ListSynchronizedGroupsRequestParameters.java
@@ -27,12 +27,18 @@ public final class ListSynchronizedGroupsRequestParameters {
 
     private final OptionalNullable<Integer> take;
 
+    private final OptionalNullable<String> q;
+
     private final Map<String, Object> additionalProperties;
 
     private ListSynchronizedGroupsRequestParameters(
-            OptionalNullable<String> from, OptionalNullable<Integer> take, Map<String, Object> additionalProperties) {
+            OptionalNullable<String> from,
+            OptionalNullable<Integer> take,
+            OptionalNullable<String> q,
+            Map<String, Object> additionalProperties) {
         this.from = from;
         this.take = take;
+        this.q = q;
         this.additionalProperties = additionalProperties;
     }
 
@@ -60,6 +66,18 @@ public OptionalNullable<Integer> getTake() {
         return take;
     }
 
+    /**
+     * @return Query in <a target='_new' href ='https://lucene.apache.org/core/2_9_4/queryparsersyntax.html'>Lucene query string syntax</a>. Only prefix search on &quot;name&quot; or &quot;email&quot; fields are allowed, with a single wildcard suffix. Operators, modifiers, and groupings are not allowed. Terms are treated as case-insensitive. Example query: &quot;name:engineering*&quot;.
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("q")
+    public OptionalNullable<String> getQ() {
+        if (q == null) {
+            return OptionalNullable.absent();
+        }
+        return q;
+    }
+
     @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
     @JsonProperty("from")
     private OptionalNullable<String> _getFrom() {
@@ -72,6 +90,12 @@ private OptionalNullable<Integer> _getTake() {
         return take;
     }
 
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("q")
+    private OptionalNullable<String> _getQ() {
+        return q;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -85,12 +109,12 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(ListSynchronizedGroupsRequestParameters other) {
-        return from.equals(other.from) && take.equals(other.take);
+        return from.equals(other.from) && take.equals(other.take) && q.equals(other.q);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.from, this.take);
+        return Objects.hash(this.from, this.take, this.q);
     }
 
     @java.lang.Override
@@ -108,6 +132,8 @@ public static final class Builder {
 
         private OptionalNullable<Integer> take = OptionalNullable.absent();
 
+        private OptionalNullable<String> q = OptionalNullable.absent();
+
         @JsonAnySetter
         private Map<String, Object> additionalProperties = new HashMap<>();
 
@@ -116,6 +142,7 @@ private Builder() {}
         public Builder from(ListSynchronizedGroupsRequestParameters other) {
             from(other.getFrom());
             take(other.getTake());
+            q(other.getQ());
             return this;
         }
 
@@ -187,8 +214,42 @@ public Builder take(com.auth0.client.mgmt.core.Nullable<Integer> take) {
             return this;
         }
 
+        /**
+         * <p>Query in <a target='_new' href ='https://lucene.apache.org/core/2_9_4/queryparsersyntax.html'>Lucene query string syntax</a>. Only prefix search on &quot;name&quot; or &quot;email&quot; fields are allowed, with a single wildcard suffix. Operators, modifiers, and groupings are not allowed. Terms are treated as case-insensitive. Example query: &quot;name:engineering*&quot;.</p>
+         */
+        @JsonSetter(value = "q", nulls = Nulls.SKIP)
+        public Builder q(@Nullable OptionalNullable<String> q) {
+            this.q = q;
+            return this;
+        }
+
+        public Builder q(String q) {
+            this.q = OptionalNullable.of(q);
+            return this;
+        }
+
+        public Builder q(Optional<String> q) {
+            if (q.isPresent()) {
+                this.q = OptionalNullable.of(q.get());
+            } else {
+                this.q = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder q(com.auth0.client.mgmt.core.Nullable<String> q) {
+            if (q.isNull()) {
+                this.q = OptionalNullable.ofNull();
+            } else if (q.isEmpty()) {
+                this.q = OptionalNullable.absent();
+            } else {
+                this.q = OptionalNullable.of(q.get());
+            }
+            return this;
+        }
+
         public ListSynchronizedGroupsRequestParameters build() {
-            return new ListSynchronizedGroupsRequestParameters(from, take, additionalProperties);
+            return new ListSynchronizedGroupsRequestParameters(from, take, q, additionalProperties);
         }
 
         public Builder additionalProperty(String key, Object value) {
diff --git a/src/main/java/com/auth0/client/mgmt/eventstreams/AsyncDeliveriesClient.java b/src/main/java/com/auth0/client/mgmt/eventstreams/AsyncDeliveriesClient.java
index a90f8678..cc355810 100644
--- a/src/main/java/com/auth0/client/mgmt/eventstreams/AsyncDeliveriesClient.java
+++ b/src/main/java/com/auth0/client/mgmt/eventstreams/AsyncDeliveriesClient.java
@@ -5,10 +5,10 @@
 
 import com.auth0.client.mgmt.core.ClientOptions;
 import com.auth0.client.mgmt.core.RequestOptions;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
 import com.auth0.client.mgmt.eventstreams.types.ListEventStreamDeliveriesRequestParameters;
 import com.auth0.client.mgmt.types.EventStreamDelivery;
 import com.auth0.client.mgmt.types.GetEventStreamDeliveryHistoryResponseContent;
-import java.util.List;
 import java.util.concurrent.CompletableFuture;
 
 public class AsyncDeliveriesClient {
@@ -28,20 +28,20 @@ public AsyncRawDeliveriesClient withRawResponse() {
         return this.rawClient;
     }
 
-    public CompletableFuture<List<EventStreamDelivery>> list(String id) {
+    public CompletableFuture<SyncPagingIterable<EventStreamDelivery>> list(String id) {
         return this.rawClient.list(id).thenApply(response -> response.body());
     }
 
-    public CompletableFuture<List<EventStreamDelivery>> list(String id, RequestOptions requestOptions) {
+    public CompletableFuture<SyncPagingIterable<EventStreamDelivery>> list(String id, RequestOptions requestOptions) {
         return this.rawClient.list(id, requestOptions).thenApply(response -> response.body());
     }
 
-    public CompletableFuture<List<EventStreamDelivery>> list(
+    public CompletableFuture<SyncPagingIterable<EventStreamDelivery>> list(
             String id, ListEventStreamDeliveriesRequestParameters request) {
         return this.rawClient.list(id, request).thenApply(response -> response.body());
     }
 
-    public CompletableFuture<List<EventStreamDelivery>> list(
+    public CompletableFuture<SyncPagingIterable<EventStreamDelivery>> list(
             String id, ListEventStreamDeliveriesRequestParameters request, RequestOptions requestOptions) {
         return this.rawClient.list(id, request, requestOptions).thenApply(response -> response.body());
     }
diff --git a/src/main/java/com/auth0/client/mgmt/eventstreams/AsyncRawDeliveriesClient.java b/src/main/java/com/auth0/client/mgmt/eventstreams/AsyncRawDeliveriesClient.java
index 78791103..4ccb8016 100644
--- a/src/main/java/com/auth0/client/mgmt/eventstreams/AsyncRawDeliveriesClient.java
+++ b/src/main/java/com/auth0/client/mgmt/eventstreams/AsyncRawDeliveriesClient.java
@@ -11,6 +11,7 @@
 import com.auth0.client.mgmt.core.QueryStringMapper;
 import com.auth0.client.mgmt.core.RequestOptions;
 import com.auth0.client.mgmt.core.RetryInterceptor;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
 import com.auth0.client.mgmt.errors.BadRequestError;
 import com.auth0.client.mgmt.errors.ForbiddenError;
 import com.auth0.client.mgmt.errors.NotFoundError;
@@ -19,11 +20,13 @@
 import com.auth0.client.mgmt.eventstreams.types.ListEventStreamDeliveriesRequestParameters;
 import com.auth0.client.mgmt.types.EventStreamDelivery;
 import com.auth0.client.mgmt.types.GetEventStreamDeliveryHistoryResponseContent;
+import com.auth0.client.mgmt.types.ListEventStreamDeliveriesResponseContent;
 import com.fasterxml.jackson.core.JsonProcessingException;
-import com.fasterxml.jackson.core.type.TypeReference;
 import java.io.IOException;
 import java.util.List;
+import java.util.Optional;
 import java.util.concurrent.CompletableFuture;
+import java.util.concurrent.ExecutionException;
 import okhttp3.Call;
 import okhttp3.Callback;
 import okhttp3.Headers;
@@ -41,21 +44,21 @@ public AsyncRawDeliveriesClient(ClientOptions clientOptions) {
         this.clientOptions = clientOptions;
     }
 
-    public CompletableFuture<ManagementApiHttpResponse<List<EventStreamDelivery>>> list(String id) {
+    public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<EventStreamDelivery>>> list(String id) {
         return list(id, ListEventStreamDeliveriesRequestParameters.builder().build());
     }
 
-    public CompletableFuture<ManagementApiHttpResponse<List<EventStreamDelivery>>> list(
+    public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<EventStreamDelivery>>> list(
             String id, RequestOptions requestOptions) {
         return list(id, ListEventStreamDeliveriesRequestParameters.builder().build(), requestOptions);
     }
 
-    public CompletableFuture<ManagementApiHttpResponse<List<EventStreamDelivery>>> list(
+    public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<EventStreamDelivery>>> list(
             String id, ListEventStreamDeliveriesRequestParameters request) {
         return list(id, request, null);
     }
 
-    public CompletableFuture<ManagementApiHttpResponse<List<EventStreamDelivery>>> list(
+    public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<EventStreamDelivery>>> list(
             String id, ListEventStreamDeliveriesRequestParameters request, RequestOptions requestOptions) {
         HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
                 .newBuilder()
@@ -107,16 +110,34 @@ public CompletableFuture<ManagementApiHttpResponse<List<EventStreamDelivery>>> l
                                     requestOptions.getMaxRetries().get()))
                     .build();
         }
-        CompletableFuture<ManagementApiHttpResponse<List<EventStreamDelivery>>> future = new CompletableFuture<>();
+        CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<EventStreamDelivery>>> future =
+                new CompletableFuture<>();
         client.newCall(okhttpRequest).enqueue(new Callback() {
             @Override
             public void onResponse(@NotNull Call call, @NotNull Response response) throws IOException {
                 try (ResponseBody responseBody = response.body()) {
                     String responseBodyString = responseBody != null ? responseBody.string() : "{}";
                     if (response.isSuccessful()) {
+                        ListEventStreamDeliveriesResponseContent parsedResponse = ObjectMappers.JSON_MAPPER.readValue(
+                                responseBodyString, ListEventStreamDeliveriesResponseContent.class);
+                        Optional<String> startingAfter = parsedResponse.getNext();
+                        ListEventStreamDeliveriesRequestParameters nextRequest =
+                                ListEventStreamDeliveriesRequestParameters.builder()
+                                        .from(request)
+                                        .from(startingAfter)
+                                        .build();
+                        List<EventStreamDelivery> result = parsedResponse.getDeliveries();
                         future.complete(new ManagementApiHttpResponse<>(
-                                ObjectMappers.JSON_MAPPER.readValue(
-                                        responseBodyString, new TypeReference<List<EventStreamDelivery>>() {}),
+                                new SyncPagingIterable<EventStreamDelivery>(
+                                        startingAfter.isPresent(), result, parsedResponse, () -> {
+                                            try {
+                                                return list(id, nextRequest, requestOptions)
+                                                        .get()
+                                                        .body();
+                                            } catch (InterruptedException | ExecutionException e) {
+                                                throw new RuntimeException(e);
+                                            }
+                                        }),
                                 response));
                         return;
                     }
diff --git a/src/main/java/com/auth0/client/mgmt/eventstreams/DeliveriesClient.java b/src/main/java/com/auth0/client/mgmt/eventstreams/DeliveriesClient.java
index 0d9b4e87..fa05c66a 100644
--- a/src/main/java/com/auth0/client/mgmt/eventstreams/DeliveriesClient.java
+++ b/src/main/java/com/auth0/client/mgmt/eventstreams/DeliveriesClient.java
@@ -5,10 +5,10 @@
 
 import com.auth0.client.mgmt.core.ClientOptions;
 import com.auth0.client.mgmt.core.RequestOptions;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
 import com.auth0.client.mgmt.eventstreams.types.ListEventStreamDeliveriesRequestParameters;
 import com.auth0.client.mgmt.types.EventStreamDelivery;
 import com.auth0.client.mgmt.types.GetEventStreamDeliveryHistoryResponseContent;
-import java.util.List;
 
 public class DeliveriesClient {
     protected final ClientOptions clientOptions;
@@ -27,19 +27,19 @@ public RawDeliveriesClient withRawResponse() {
         return this.rawClient;
     }
 
-    public List<EventStreamDelivery> list(String id) {
+    public SyncPagingIterable<EventStreamDelivery> list(String id) {
         return this.rawClient.list(id).body();
     }
 
-    public List<EventStreamDelivery> list(String id, RequestOptions requestOptions) {
+    public SyncPagingIterable<EventStreamDelivery> list(String id, RequestOptions requestOptions) {
         return this.rawClient.list(id, requestOptions).body();
     }
 
-    public List<EventStreamDelivery> list(String id, ListEventStreamDeliveriesRequestParameters request) {
+    public SyncPagingIterable<EventStreamDelivery> list(String id, ListEventStreamDeliveriesRequestParameters request) {
         return this.rawClient.list(id, request).body();
     }
 
-    public List<EventStreamDelivery> list(
+    public SyncPagingIterable<EventStreamDelivery> list(
             String id, ListEventStreamDeliveriesRequestParameters request, RequestOptions requestOptions) {
         return this.rawClient.list(id, request, requestOptions).body();
     }
diff --git a/src/main/java/com/auth0/client/mgmt/eventstreams/RawDeliveriesClient.java b/src/main/java/com/auth0/client/mgmt/eventstreams/RawDeliveriesClient.java
index 92557992..9276a536 100644
--- a/src/main/java/com/auth0/client/mgmt/eventstreams/RawDeliveriesClient.java
+++ b/src/main/java/com/auth0/client/mgmt/eventstreams/RawDeliveriesClient.java
@@ -11,6 +11,7 @@
 import com.auth0.client.mgmt.core.QueryStringMapper;
 import com.auth0.client.mgmt.core.RequestOptions;
 import com.auth0.client.mgmt.core.RetryInterceptor;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
 import com.auth0.client.mgmt.errors.BadRequestError;
 import com.auth0.client.mgmt.errors.ForbiddenError;
 import com.auth0.client.mgmt.errors.NotFoundError;
@@ -19,10 +20,11 @@
 import com.auth0.client.mgmt.eventstreams.types.ListEventStreamDeliveriesRequestParameters;
 import com.auth0.client.mgmt.types.EventStreamDelivery;
 import com.auth0.client.mgmt.types.GetEventStreamDeliveryHistoryResponseContent;
+import com.auth0.client.mgmt.types.ListEventStreamDeliveriesResponseContent;
 import com.fasterxml.jackson.core.JsonProcessingException;
-import com.fasterxml.jackson.core.type.TypeReference;
 import java.io.IOException;
 import java.util.List;
+import java.util.Optional;
 import okhttp3.Headers;
 import okhttp3.HttpUrl;
 import okhttp3.OkHttpClient;
@@ -37,20 +39,21 @@ public RawDeliveriesClient(ClientOptions clientOptions) {
         this.clientOptions = clientOptions;
     }
 
-    public ManagementApiHttpResponse<List<EventStreamDelivery>> list(String id) {
+    public ManagementApiHttpResponse<SyncPagingIterable<EventStreamDelivery>> list(String id) {
         return list(id, ListEventStreamDeliveriesRequestParameters.builder().build());
     }
 
-    public ManagementApiHttpResponse<List<EventStreamDelivery>> list(String id, RequestOptions requestOptions) {
+    public ManagementApiHttpResponse<SyncPagingIterable<EventStreamDelivery>> list(
+            String id, RequestOptions requestOptions) {
         return list(id, ListEventStreamDeliveriesRequestParameters.builder().build(), requestOptions);
     }
 
-    public ManagementApiHttpResponse<List<EventStreamDelivery>> list(
+    public ManagementApiHttpResponse<SyncPagingIterable<EventStreamDelivery>> list(
             String id, ListEventStreamDeliveriesRequestParameters request) {
         return list(id, request, null);
     }
 
-    public ManagementApiHttpResponse<List<EventStreamDelivery>> list(
+    public ManagementApiHttpResponse<SyncPagingIterable<EventStreamDelivery>> list(
             String id, ListEventStreamDeliveriesRequestParameters request, RequestOptions requestOptions) {
         HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
                 .newBuilder()
@@ -106,9 +109,20 @@ public ManagementApiHttpResponse<List<EventStreamDelivery>> list(
             ResponseBody responseBody = response.body();
             String responseBodyString = responseBody != null ? responseBody.string() : "{}";
             if (response.isSuccessful()) {
+                ListEventStreamDeliveriesResponseContent parsedResponse = ObjectMappers.JSON_MAPPER.readValue(
+                        responseBodyString, ListEventStreamDeliveriesResponseContent.class);
+                Optional<String> startingAfter = parsedResponse.getNext();
+                ListEventStreamDeliveriesRequestParameters nextRequest =
+                        ListEventStreamDeliveriesRequestParameters.builder()
+                                .from(request)
+                                .from(startingAfter)
+                                .build();
+                List<EventStreamDelivery> result = parsedResponse.getDeliveries();
                 return new ManagementApiHttpResponse<>(
-                        ObjectMappers.JSON_MAPPER.readValue(
-                                responseBodyString, new TypeReference<List<EventStreamDelivery>>() {}),
+                        new SyncPagingIterable<EventStreamDelivery>(
+                                startingAfter.isPresent(), result, parsedResponse, () -> list(
+                                                id, nextRequest, requestOptions)
+                                        .body()),
                         response);
             }
             try {
diff --git a/src/main/java/com/auth0/client/mgmt/flows/AsyncRawExecutionsClient.java b/src/main/java/com/auth0/client/mgmt/flows/AsyncRawExecutionsClient.java
index c1a54751..61111e90 100644
--- a/src/main/java/com/auth0/client/mgmt/flows/AsyncRawExecutionsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/flows/AsyncRawExecutionsClient.java
@@ -66,6 +66,8 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<FlowExecut
                 .addPathSegments("flows")
                 .addPathSegment(flowId)
                 .addPathSegments("executions");
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/flows/RawExecutionsClient.java b/src/main/java/com/auth0/client/mgmt/flows/RawExecutionsClient.java
index 0dfb0eb9..91db8348 100644
--- a/src/main/java/com/auth0/client/mgmt/flows/RawExecutionsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/flows/RawExecutionsClient.java
@@ -61,6 +61,8 @@ public ManagementApiHttpResponse<SyncPagingIterable<FlowExecutionSummary>> list(
                 .addPathSegments("flows")
                 .addPathSegment(flowId)
                 .addPathSegments("executions");
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/flows/types/ListFlowExecutionsRequestParameters.java b/src/main/java/com/auth0/client/mgmt/flows/types/ListFlowExecutionsRequestParameters.java
index c7f26792..1d1298a2 100644
--- a/src/main/java/com/auth0/client/mgmt/flows/types/ListFlowExecutionsRequestParameters.java
+++ b/src/main/java/com/auth0/client/mgmt/flows/types/ListFlowExecutionsRequestParameters.java
@@ -23,6 +23,8 @@
 @JsonInclude(JsonInclude.Include.NON_ABSENT)
 @JsonDeserialize(builder = ListFlowExecutionsRequestParameters.Builder.class)
 public final class ListFlowExecutionsRequestParameters {
+    private final OptionalNullable<Boolean> includeTotals;
+
     private final OptionalNullable<String> from;
 
     private final OptionalNullable<Integer> take;
@@ -30,12 +32,28 @@ public final class ListFlowExecutionsRequestParameters {
     private final Map<String, Object> additionalProperties;
 
     private ListFlowExecutionsRequestParameters(
-            OptionalNullable<String> from, OptionalNullable<Integer> take, Map<String, Object> additionalProperties) {
+            OptionalNullable<Boolean> includeTotals,
+            OptionalNullable<String> from,
+            OptionalNullable<Integer> take,
+            Map<String, Object> additionalProperties) {
+        this.includeTotals = includeTotals;
         this.from = from;
         this.take = take;
         this.additionalProperties = additionalProperties;
     }
 
+    /**
+     * @return Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    public OptionalNullable<Boolean> getIncludeTotals() {
+        if (includeTotals == null) {
+            return OptionalNullable.absent();
+        }
+        return includeTotals;
+    }
+
     /**
      * @return Optional Id from which to start selection.
      */
@@ -60,6 +78,12 @@ public OptionalNullable<Integer> getTake() {
         return take;
     }
 
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    private OptionalNullable<Boolean> _getIncludeTotals() {
+        return includeTotals;
+    }
+
     @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
     @JsonProperty("from")
     private OptionalNullable<String> _getFrom() {
@@ -85,12 +109,12 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(ListFlowExecutionsRequestParameters other) {
-        return from.equals(other.from) && take.equals(other.take);
+        return includeTotals.equals(other.includeTotals) && from.equals(other.from) && take.equals(other.take);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.from, this.take);
+        return Objects.hash(this.includeTotals, this.from, this.take);
     }
 
     @java.lang.Override
@@ -104,6 +128,8 @@ public static Builder builder() {
 
     @JsonIgnoreProperties(ignoreUnknown = true)
     public static final class Builder {
+        private OptionalNullable<Boolean> includeTotals = OptionalNullable.absent();
+
         private OptionalNullable<String> from = OptionalNullable.absent();
 
         private OptionalNullable<Integer> take = OptionalNullable.absent();
@@ -114,11 +140,46 @@ public static final class Builder {
         private Builder() {}
 
         public Builder from(ListFlowExecutionsRequestParameters other) {
+            includeTotals(other.getIncludeTotals());
             from(other.getFrom());
             take(other.getTake());
             return this;
         }
 
+        /**
+         * <p>Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).</p>
+         */
+        @JsonSetter(value = "include_totals", nulls = Nulls.SKIP)
+        public Builder includeTotals(@Nullable OptionalNullable<Boolean> includeTotals) {
+            this.includeTotals = includeTotals;
+            return this;
+        }
+
+        public Builder includeTotals(Boolean includeTotals) {
+            this.includeTotals = OptionalNullable.of(includeTotals);
+            return this;
+        }
+
+        public Builder includeTotals(Optional<Boolean> includeTotals) {
+            if (includeTotals.isPresent()) {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            } else {
+                this.includeTotals = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder includeTotals(com.auth0.client.mgmt.core.Nullable<Boolean> includeTotals) {
+            if (includeTotals.isNull()) {
+                this.includeTotals = OptionalNullable.ofNull();
+            } else if (includeTotals.isEmpty()) {
+                this.includeTotals = OptionalNullable.absent();
+            } else {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            }
+            return this;
+        }
+
         /**
          * <p>Optional Id from which to start selection.</p>
          */
@@ -188,7 +249,7 @@ public Builder take(com.auth0.client.mgmt.core.Nullable<Integer> take) {
         }
 
         public ListFlowExecutionsRequestParameters build() {
-            return new ListFlowExecutionsRequestParameters(from, take, additionalProperties);
+            return new ListFlowExecutionsRequestParameters(includeTotals, from, take, additionalProperties);
         }
 
         public Builder additionalProperty(String key, Object value) {
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/AsyncClientsClient.java b/src/main/java/com/auth0/client/mgmt/organizations/AsyncClientsClient.java
new file mode 100644
index 00000000..6abc012d
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/organizations/AsyncClientsClient.java
@@ -0,0 +1,162 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.organizations;
+
+import com.auth0.client.mgmt.core.ClientOptions;
+import com.auth0.client.mgmt.core.RequestOptions;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
+import com.auth0.client.mgmt.organizations.types.CreateOrganizationClientsRequestContent;
+import com.auth0.client.mgmt.organizations.types.DeleteOrganizationClientsRequestContent;
+import com.auth0.client.mgmt.organizations.types.ListOrganizationClientsRequestParameters;
+import com.auth0.client.mgmt.organizations.types.UpdateOrganizationClientRequestContent;
+import com.auth0.client.mgmt.types.GetOrganizationClientResponseContent;
+import com.auth0.client.mgmt.types.OrganizationClient;
+import com.auth0.client.mgmt.types.UpdateOrganizationClientResponseContent;
+import java.util.List;
+import java.util.concurrent.CompletableFuture;
+
+public class AsyncClientsClient {
+    protected final ClientOptions clientOptions;
+
+    private final AsyncRawClientsClient rawClient;
+
+    public AsyncClientsClient(ClientOptions clientOptions) {
+        this.clientOptions = clientOptions;
+        this.rawClient = new AsyncRawClientsClient(clientOptions);
+    }
+
+    /**
+     * Get responses with HTTP metadata like headers
+     */
+    public AsyncRawClientsClient withRawResponse() {
+        return this.rawClient;
+    }
+
+    /**
+     * List all clients associated with an organization, using checkpoint pagination.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+     *   </li>
+     * </ul></p>
+     */
+    public CompletableFuture<SyncPagingIterable<OrganizationClient>> list(String id) {
+        return this.rawClient.list(id).thenApply(response -> response.body());
+    }
+
+    /**
+     * List all clients associated with an organization, using checkpoint pagination.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+     *   </li>
+     * </ul></p>
+     */
+    public CompletableFuture<SyncPagingIterable<OrganizationClient>> list(String id, RequestOptions requestOptions) {
+        return this.rawClient.list(id, requestOptions).thenApply(response -> response.body());
+    }
+
+    /**
+     * List all clients associated with an organization, using checkpoint pagination.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+     *   </li>
+     * </ul></p>
+     */
+    public CompletableFuture<SyncPagingIterable<OrganizationClient>> list(
+            String id, ListOrganizationClientsRequestParameters request) {
+        return this.rawClient.list(id, request).thenApply(response -> response.body());
+    }
+
+    /**
+     * List all clients associated with an organization, using checkpoint pagination.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+     *   </li>
+     * </ul></p>
+     */
+    public CompletableFuture<SyncPagingIterable<OrganizationClient>> list(
+            String id, ListOrganizationClientsRequestParameters request, RequestOptions requestOptions) {
+        return this.rawClient.list(id, request, requestOptions).thenApply(response -> response.body());
+    }
+
+    /**
+     * Associate one or more clients with an organization.
+     */
+    public CompletableFuture<List<OrganizationClient>> create(
+            String id, CreateOrganizationClientsRequestContent request) {
+        return this.rawClient.create(id, request).thenApply(response -> response.body());
+    }
+
+    /**
+     * Associate one or more clients with an organization.
+     */
+    public CompletableFuture<List<OrganizationClient>> create(
+            String id, CreateOrganizationClientsRequestContent request, RequestOptions requestOptions) {
+        return this.rawClient.create(id, request, requestOptions).thenApply(response -> response.body());
+    }
+
+    /**
+     * Remove one or more client associations from an organization.
+     */
+    public CompletableFuture<Void> delete(String id, DeleteOrganizationClientsRequestContent request) {
+        return this.rawClient.delete(id, request).thenApply(response -> response.body());
+    }
+
+    /**
+     * Remove one or more client associations from an organization.
+     */
+    public CompletableFuture<Void> delete(
+            String id, DeleteOrganizationClientsRequestContent request, RequestOptions requestOptions) {
+        return this.rawClient.delete(id, request, requestOptions).thenApply(response -> response.body());
+    }
+
+    /**
+     * Get a specific client association for an organization.
+     */
+    public CompletableFuture<GetOrganizationClientResponseContent> get(String id, String clientId) {
+        return this.rawClient.get(id, clientId).thenApply(response -> response.body());
+    }
+
+    /**
+     * Get a specific client association for an organization.
+     */
+    public CompletableFuture<GetOrganizationClientResponseContent> get(
+            String id, String clientId, RequestOptions requestOptions) {
+        return this.rawClient.get(id, clientId, requestOptions).thenApply(response -> response.body());
+    }
+
+    /**
+     * Update an organization client association.
+     */
+    public CompletableFuture<UpdateOrganizationClientResponseContent> update(String id, String clientId) {
+        return this.rawClient.update(id, clientId).thenApply(response -> response.body());
+    }
+
+    /**
+     * Update an organization client association.
+     */
+    public CompletableFuture<UpdateOrganizationClientResponseContent> update(
+            String id, String clientId, RequestOptions requestOptions) {
+        return this.rawClient.update(id, clientId, requestOptions).thenApply(response -> response.body());
+    }
+
+    /**
+     * Update an organization client association.
+     */
+    public CompletableFuture<UpdateOrganizationClientResponseContent> update(
+            String id, String clientId, UpdateOrganizationClientRequestContent request) {
+        return this.rawClient.update(id, clientId, request).thenApply(response -> response.body());
+    }
+
+    /**
+     * Update an organization client association.
+     */
+    public CompletableFuture<UpdateOrganizationClientResponseContent> update(
+            String id, String clientId, UpdateOrganizationClientRequestContent request, RequestOptions requestOptions) {
+        return this.rawClient.update(id, clientId, request, requestOptions).thenApply(response -> response.body());
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/AsyncMembersClient.java b/src/main/java/com/auth0/client/mgmt/organizations/AsyncMembersClient.java
index b42e9461..648296f3 100644
--- a/src/main/java/com/auth0/client/mgmt/organizations/AsyncMembersClient.java
+++ b/src/main/java/com/auth0/client/mgmt/organizations/AsyncMembersClient.java
@@ -44,7 +44,7 @@ public AsyncRawMembersClient withRawResponse() {
      * This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
      * <ul>
      * <li>Use the <code>fields</code> parameter to optionally define the specific member details retrieved. If <code>fields</code> is left blank, all fields (except roles) are returned.</li>
-     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token.</li>
+     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token. Only directly assigned roles are returned. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</li>
      * </ul>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
@@ -64,7 +64,7 @@ public CompletableFuture<SyncPagingIterable<OrganizationMember>> list(String id)
      * This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
      * <ul>
      * <li>Use the <code>fields</code> parameter to optionally define the specific member details retrieved. If <code>fields</code> is left blank, all fields (except roles) are returned.</li>
-     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token.</li>
+     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token. Only directly assigned roles are returned. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</li>
      * </ul>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
@@ -84,7 +84,7 @@ public CompletableFuture<SyncPagingIterable<OrganizationMember>> list(String id,
      * This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
      * <ul>
      * <li>Use the <code>fields</code> parameter to optionally define the specific member details retrieved. If <code>fields</code> is left blank, all fields (except roles) are returned.</li>
-     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token.</li>
+     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token. Only directly assigned roles are returned. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</li>
      * </ul>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
@@ -105,7 +105,7 @@ public CompletableFuture<SyncPagingIterable<OrganizationMember>> list(
      * This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
      * <ul>
      * <li>Use the <code>fields</code> parameter to optionally define the specific member details retrieved. If <code>fields</code> is left blank, all fields (except roles) are returned.</li>
-     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token.</li>
+     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token. Only directly assigned roles are returned. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</li>
      * </ul>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/AsyncRawClientsClient.java b/src/main/java/com/auth0/client/mgmt/organizations/AsyncRawClientsClient.java
new file mode 100644
index 00000000..7b9b91f3
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/organizations/AsyncRawClientsClient.java
@@ -0,0 +1,690 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.organizations;
+
+import com.auth0.client.mgmt.core.ClientOptions;
+import com.auth0.client.mgmt.core.ManagementApiException;
+import com.auth0.client.mgmt.core.ManagementApiHttpResponse;
+import com.auth0.client.mgmt.core.ManagementException;
+import com.auth0.client.mgmt.core.MediaTypes;
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.core.QueryStringMapper;
+import com.auth0.client.mgmt.core.RequestOptions;
+import com.auth0.client.mgmt.core.RetryInterceptor;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
+import com.auth0.client.mgmt.errors.BadRequestError;
+import com.auth0.client.mgmt.errors.ConflictError;
+import com.auth0.client.mgmt.errors.ForbiddenError;
+import com.auth0.client.mgmt.errors.NotFoundError;
+import com.auth0.client.mgmt.errors.TooManyRequestsError;
+import com.auth0.client.mgmt.errors.UnauthorizedError;
+import com.auth0.client.mgmt.organizations.types.CreateOrganizationClientsRequestContent;
+import com.auth0.client.mgmt.organizations.types.DeleteOrganizationClientsRequestContent;
+import com.auth0.client.mgmt.organizations.types.ListOrganizationClientsRequestParameters;
+import com.auth0.client.mgmt.organizations.types.UpdateOrganizationClientRequestContent;
+import com.auth0.client.mgmt.types.GetOrganizationClientResponseContent;
+import com.auth0.client.mgmt.types.ListOrganizationClientsResponseContent;
+import com.auth0.client.mgmt.types.OrganizationClient;
+import com.auth0.client.mgmt.types.UpdateOrganizationClientResponseContent;
+import com.fasterxml.jackson.core.JsonProcessingException;
+import com.fasterxml.jackson.core.type.TypeReference;
+import java.io.IOException;
+import java.util.List;
+import java.util.Optional;
+import java.util.concurrent.CompletableFuture;
+import java.util.concurrent.ExecutionException;
+import okhttp3.Call;
+import okhttp3.Callback;
+import okhttp3.Headers;
+import okhttp3.HttpUrl;
+import okhttp3.OkHttpClient;
+import okhttp3.Request;
+import okhttp3.RequestBody;
+import okhttp3.Response;
+import okhttp3.ResponseBody;
+import org.jetbrains.annotations.NotNull;
+
+public class AsyncRawClientsClient {
+    protected final ClientOptions clientOptions;
+
+    public AsyncRawClientsClient(ClientOptions clientOptions) {
+        this.clientOptions = clientOptions;
+    }
+
+    /**
+     * List all clients associated with an organization, using checkpoint pagination.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+     *   </li>
+     * </ul></p>
+     */
+    public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<OrganizationClient>>> list(String id) {
+        return list(id, ListOrganizationClientsRequestParameters.builder().build());
+    }
+
+    /**
+     * List all clients associated with an organization, using checkpoint pagination.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+     *   </li>
+     * </ul></p>
+     */
+    public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<OrganizationClient>>> list(
+            String id, RequestOptions requestOptions) {
+        return list(id, ListOrganizationClientsRequestParameters.builder().build(), requestOptions);
+    }
+
+    /**
+     * List all clients associated with an organization, using checkpoint pagination.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+     *   </li>
+     * </ul></p>
+     */
+    public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<OrganizationClient>>> list(
+            String id, ListOrganizationClientsRequestParameters request) {
+        return list(id, request, null);
+    }
+
+    /**
+     * List all clients associated with an organization, using checkpoint pagination.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+     *   </li>
+     * </ul></p>
+     */
+    public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<OrganizationClient>>> list(
+            String id, ListOrganizationClientsRequestParameters request, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("organizations")
+                .addPathSegment(id)
+                .addPathSegments("clients");
+        if (!request.getFrom().isAbsent()) {
+            QueryStringMapper.addQueryParameter(
+                    httpUrl, "from", request.getFrom().orElse(null), false);
+        }
+        QueryStringMapper.addQueryParameter(httpUrl, "take", request.getTake().orElse(50), false);
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        Request.Builder _requestBuilder = new Request.Builder()
+                .url(httpUrl.build())
+                .method("GET", null)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Accept", "application/json");
+        Request okhttpRequest = _requestBuilder.build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<OrganizationClient>>> future =
+                new CompletableFuture<>();
+        client.newCall(okhttpRequest).enqueue(new Callback() {
+            @Override
+            public void onResponse(@NotNull Call call, @NotNull Response response) throws IOException {
+                try (ResponseBody responseBody = response.body()) {
+                    String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+                    if (response.isSuccessful()) {
+                        ListOrganizationClientsResponseContent parsedResponse = ObjectMappers.JSON_MAPPER.readValue(
+                                responseBodyString, ListOrganizationClientsResponseContent.class);
+                        Optional<String> startingAfter = parsedResponse.getNext();
+                        ListOrganizationClientsRequestParameters nextRequest =
+                                ListOrganizationClientsRequestParameters.builder()
+                                        .from(request)
+                                        .from(startingAfter)
+                                        .build();
+                        List<OrganizationClient> result = parsedResponse.getClients();
+                        future.complete(new ManagementApiHttpResponse<>(
+                                new SyncPagingIterable<OrganizationClient>(
+                                        startingAfter.isPresent(), result, parsedResponse, () -> {
+                                            try {
+                                                return list(id, nextRequest, requestOptions)
+                                                        .get()
+                                                        .body();
+                                            } catch (InterruptedException | ExecutionException e) {
+                                                throw new RuntimeException(e);
+                                            }
+                                        }),
+                                response));
+                        return;
+                    }
+                    try {
+                        switch (response.code()) {
+                            case 400:
+                                future.completeExceptionally(new BadRequestError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 401:
+                                future.completeExceptionally(new UnauthorizedError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 403:
+                                future.completeExceptionally(new ForbiddenError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 404:
+                                future.completeExceptionally(new NotFoundError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 429:
+                                future.completeExceptionally(new TooManyRequestsError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                        }
+                    } catch (JsonProcessingException ignored) {
+                        // unable to map error response, throwing generic error
+                    }
+                    Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+                    future.completeExceptionally(new ManagementApiException(
+                            "Error with status code " + response.code(), response.code(), errorBody, response));
+                    return;
+                } catch (JsonProcessingException e) {
+                    future.completeExceptionally(
+                            new ManagementException("Failed to deserialize response: " + e.getMessage(), e));
+                } catch (IOException e) {
+                    future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+                }
+            }
+
+            @Override
+            public void onFailure(@NotNull Call call, @NotNull IOException e) {
+                future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+            }
+        });
+        return future;
+    }
+
+    /**
+     * Associate one or more clients with an organization.
+     */
+    public CompletableFuture<ManagementApiHttpResponse<List<OrganizationClient>>> create(
+            String id, CreateOrganizationClientsRequestContent request) {
+        return create(id, request, null);
+    }
+
+    /**
+     * Associate one or more clients with an organization.
+     */
+    public CompletableFuture<ManagementApiHttpResponse<List<OrganizationClient>>> create(
+            String id, CreateOrganizationClientsRequestContent request, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("organizations")
+                .addPathSegment(id)
+                .addPathSegments("clients");
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        RequestBody body;
+        try {
+            body = RequestBody.create(
+                    ObjectMappers.JSON_MAPPER.writeValueAsBytes(request), MediaTypes.APPLICATION_JSON);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to serialize request", e);
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("POST", body)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Content-Type", "application/json")
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        CompletableFuture<ManagementApiHttpResponse<List<OrganizationClient>>> future = new CompletableFuture<>();
+        client.newCall(okhttpRequest).enqueue(new Callback() {
+            @Override
+            public void onResponse(@NotNull Call call, @NotNull Response response) throws IOException {
+                try (ResponseBody responseBody = response.body()) {
+                    String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+                    if (response.isSuccessful()) {
+                        future.complete(new ManagementApiHttpResponse<>(
+                                ObjectMappers.JSON_MAPPER.readValue(
+                                        responseBodyString, new TypeReference<List<OrganizationClient>>() {}),
+                                response));
+                        return;
+                    }
+                    try {
+                        switch (response.code()) {
+                            case 400:
+                                future.completeExceptionally(new BadRequestError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 401:
+                                future.completeExceptionally(new UnauthorizedError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 403:
+                                future.completeExceptionally(new ForbiddenError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 404:
+                                future.completeExceptionally(new NotFoundError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 409:
+                                future.completeExceptionally(new ConflictError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 429:
+                                future.completeExceptionally(new TooManyRequestsError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                        }
+                    } catch (JsonProcessingException ignored) {
+                        // unable to map error response, throwing generic error
+                    }
+                    Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+                    future.completeExceptionally(new ManagementApiException(
+                            "Error with status code " + response.code(), response.code(), errorBody, response));
+                    return;
+                } catch (JsonProcessingException e) {
+                    future.completeExceptionally(
+                            new ManagementException("Failed to deserialize response: " + e.getMessage(), e));
+                } catch (IOException e) {
+                    future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+                }
+            }
+
+            @Override
+            public void onFailure(@NotNull Call call, @NotNull IOException e) {
+                future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+            }
+        });
+        return future;
+    }
+
+    /**
+     * Remove one or more client associations from an organization.
+     */
+    public CompletableFuture<ManagementApiHttpResponse<Void>> delete(
+            String id, DeleteOrganizationClientsRequestContent request) {
+        return delete(id, request, null);
+    }
+
+    /**
+     * Remove one or more client associations from an organization.
+     */
+    public CompletableFuture<ManagementApiHttpResponse<Void>> delete(
+            String id, DeleteOrganizationClientsRequestContent request, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("organizations")
+                .addPathSegment(id)
+                .addPathSegments("clients");
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        RequestBody body;
+        try {
+            body = RequestBody.create(
+                    ObjectMappers.JSON_MAPPER.writeValueAsBytes(request), MediaTypes.APPLICATION_JSON);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to serialize request", e);
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("DELETE", body)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Content-Type", "application/json")
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        CompletableFuture<ManagementApiHttpResponse<Void>> future = new CompletableFuture<>();
+        client.newCall(okhttpRequest).enqueue(new Callback() {
+            @Override
+            public void onResponse(@NotNull Call call, @NotNull Response response) throws IOException {
+                try (ResponseBody responseBody = response.body()) {
+                    if (response.isSuccessful()) {
+                        future.complete(new ManagementApiHttpResponse<>(null, response));
+                        return;
+                    }
+                    String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+                    try {
+                        switch (response.code()) {
+                            case 400:
+                                future.completeExceptionally(new BadRequestError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 401:
+                                future.completeExceptionally(new UnauthorizedError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 403:
+                                future.completeExceptionally(new ForbiddenError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 404:
+                                future.completeExceptionally(new NotFoundError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 429:
+                                future.completeExceptionally(new TooManyRequestsError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                        }
+                    } catch (JsonProcessingException ignored) {
+                        // unable to map error response, throwing generic error
+                    }
+                    Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+                    future.completeExceptionally(new ManagementApiException(
+                            "Error with status code " + response.code(), response.code(), errorBody, response));
+                    return;
+                } catch (JsonProcessingException e) {
+                    future.completeExceptionally(
+                            new ManagementException("Failed to deserialize response: " + e.getMessage(), e));
+                } catch (IOException e) {
+                    future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+                }
+            }
+
+            @Override
+            public void onFailure(@NotNull Call call, @NotNull IOException e) {
+                future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+            }
+        });
+        return future;
+    }
+
+    /**
+     * Get a specific client association for an organization.
+     */
+    public CompletableFuture<ManagementApiHttpResponse<GetOrganizationClientResponseContent>> get(
+            String id, String clientId) {
+        return get(id, clientId, null);
+    }
+
+    /**
+     * Get a specific client association for an organization.
+     */
+    public CompletableFuture<ManagementApiHttpResponse<GetOrganizationClientResponseContent>> get(
+            String id, String clientId, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("organizations")
+                .addPathSegment(id)
+                .addPathSegments("clients")
+                .addPathSegment(clientId);
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("GET", null)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        CompletableFuture<ManagementApiHttpResponse<GetOrganizationClientResponseContent>> future =
+                new CompletableFuture<>();
+        client.newCall(okhttpRequest).enqueue(new Callback() {
+            @Override
+            public void onResponse(@NotNull Call call, @NotNull Response response) throws IOException {
+                try (ResponseBody responseBody = response.body()) {
+                    String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+                    if (response.isSuccessful()) {
+                        future.complete(new ManagementApiHttpResponse<>(
+                                ObjectMappers.JSON_MAPPER.readValue(
+                                        responseBodyString, GetOrganizationClientResponseContent.class),
+                                response));
+                        return;
+                    }
+                    try {
+                        switch (response.code()) {
+                            case 400:
+                                future.completeExceptionally(new BadRequestError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 401:
+                                future.completeExceptionally(new UnauthorizedError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 403:
+                                future.completeExceptionally(new ForbiddenError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 404:
+                                future.completeExceptionally(new NotFoundError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 429:
+                                future.completeExceptionally(new TooManyRequestsError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                        }
+                    } catch (JsonProcessingException ignored) {
+                        // unable to map error response, throwing generic error
+                    }
+                    Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+                    future.completeExceptionally(new ManagementApiException(
+                            "Error with status code " + response.code(), response.code(), errorBody, response));
+                    return;
+                } catch (JsonProcessingException e) {
+                    future.completeExceptionally(
+                            new ManagementException("Failed to deserialize response: " + e.getMessage(), e));
+                } catch (IOException e) {
+                    future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+                }
+            }
+
+            @Override
+            public void onFailure(@NotNull Call call, @NotNull IOException e) {
+                future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+            }
+        });
+        return future;
+    }
+
+    /**
+     * Update an organization client association.
+     */
+    public CompletableFuture<ManagementApiHttpResponse<UpdateOrganizationClientResponseContent>> update(
+            String id, String clientId) {
+        return update(
+                id, clientId, UpdateOrganizationClientRequestContent.builder().build());
+    }
+
+    /**
+     * Update an organization client association.
+     */
+    public CompletableFuture<ManagementApiHttpResponse<UpdateOrganizationClientResponseContent>> update(
+            String id, String clientId, RequestOptions requestOptions) {
+        return update(
+                id, clientId, UpdateOrganizationClientRequestContent.builder().build(), requestOptions);
+    }
+
+    /**
+     * Update an organization client association.
+     */
+    public CompletableFuture<ManagementApiHttpResponse<UpdateOrganizationClientResponseContent>> update(
+            String id, String clientId, UpdateOrganizationClientRequestContent request) {
+        return update(id, clientId, request, null);
+    }
+
+    /**
+     * Update an organization client association.
+     */
+    public CompletableFuture<ManagementApiHttpResponse<UpdateOrganizationClientResponseContent>> update(
+            String id, String clientId, UpdateOrganizationClientRequestContent request, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("organizations")
+                .addPathSegment(id)
+                .addPathSegments("clients")
+                .addPathSegment(clientId);
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        RequestBody body;
+        try {
+            body = RequestBody.create(
+                    ObjectMappers.JSON_MAPPER.writeValueAsBytes(request), MediaTypes.APPLICATION_JSON);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to serialize request", e);
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("PATCH", body)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Content-Type", "application/json")
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        CompletableFuture<ManagementApiHttpResponse<UpdateOrganizationClientResponseContent>> future =
+                new CompletableFuture<>();
+        client.newCall(okhttpRequest).enqueue(new Callback() {
+            @Override
+            public void onResponse(@NotNull Call call, @NotNull Response response) throws IOException {
+                try (ResponseBody responseBody = response.body()) {
+                    String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+                    if (response.isSuccessful()) {
+                        future.complete(new ManagementApiHttpResponse<>(
+                                ObjectMappers.JSON_MAPPER.readValue(
+                                        responseBodyString, UpdateOrganizationClientResponseContent.class),
+                                response));
+                        return;
+                    }
+                    try {
+                        switch (response.code()) {
+                            case 400:
+                                future.completeExceptionally(new BadRequestError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 401:
+                                future.completeExceptionally(new UnauthorizedError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 403:
+                                future.completeExceptionally(new ForbiddenError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 404:
+                                future.completeExceptionally(new NotFoundError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 429:
+                                future.completeExceptionally(new TooManyRequestsError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                        }
+                    } catch (JsonProcessingException ignored) {
+                        // unable to map error response, throwing generic error
+                    }
+                    Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+                    future.completeExceptionally(new ManagementApiException(
+                            "Error with status code " + response.code(), response.code(), errorBody, response));
+                    return;
+                } catch (JsonProcessingException e) {
+                    future.completeExceptionally(
+                            new ManagementException("Failed to deserialize response: " + e.getMessage(), e));
+                } catch (IOException e) {
+                    future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+                }
+            }
+
+            @Override
+            public void onFailure(@NotNull Call call, @NotNull IOException e) {
+                future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+            }
+        });
+        return future;
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/AsyncRawEnabledConnectionsClient.java b/src/main/java/com/auth0/client/mgmt/organizations/AsyncRawEnabledConnectionsClient.java
index 26c7c016..f9d4f177 100644
--- a/src/main/java/com/auth0/client/mgmt/organizations/AsyncRawEnabledConnectionsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/organizations/AsyncRawEnabledConnectionsClient.java
@@ -14,6 +14,7 @@
 import com.auth0.client.mgmt.core.RetryInterceptor;
 import com.auth0.client.mgmt.core.SyncPagingIterable;
 import com.auth0.client.mgmt.errors.BadRequestError;
+import com.auth0.client.mgmt.errors.ConflictError;
 import com.auth0.client.mgmt.errors.ForbiddenError;
 import com.auth0.client.mgmt.errors.NotFoundError;
 import com.auth0.client.mgmt.errors.TooManyRequestsError;
@@ -286,6 +287,11 @@ public void onResponse(@NotNull Call call, @NotNull Response response) throws IO
                                         ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
                                         response));
                                 return;
+                            case 409:
+                                future.completeExceptionally(new ConflictError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
                             case 429:
                                 future.completeExceptionally(new TooManyRequestsError(
                                         ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/AsyncRawMembersClient.java b/src/main/java/com/auth0/client/mgmt/organizations/AsyncRawMembersClient.java
index 25d7ac15..b27c320e 100644
--- a/src/main/java/com/auth0/client/mgmt/organizations/AsyncRawMembersClient.java
+++ b/src/main/java/com/auth0/client/mgmt/organizations/AsyncRawMembersClient.java
@@ -53,7 +53,7 @@ public AsyncRawMembersClient(ClientOptions clientOptions) {
      * This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
      * <ul>
      * <li>Use the <code>fields</code> parameter to optionally define the specific member details retrieved. If <code>fields</code> is left blank, all fields (except roles) are returned.</li>
-     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token.</li>
+     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token. Only directly assigned roles are returned. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</li>
      * </ul>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
@@ -73,7 +73,7 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Organizati
      * This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
      * <ul>
      * <li>Use the <code>fields</code> parameter to optionally define the specific member details retrieved. If <code>fields</code> is left blank, all fields (except roles) are returned.</li>
-     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token.</li>
+     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token. Only directly assigned roles are returned. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</li>
      * </ul>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
@@ -94,7 +94,7 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Organizati
      * This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
      * <ul>
      * <li>Use the <code>fields</code> parameter to optionally define the specific member details retrieved. If <code>fields</code> is left blank, all fields (except roles) are returned.</li>
-     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token.</li>
+     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token. Only directly assigned roles are returned. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</li>
      * </ul>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
@@ -115,7 +115,7 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Organizati
      * This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
      * <ul>
      * <li>Use the <code>fields</code> parameter to optionally define the specific member details retrieved. If <code>fields</code> is left blank, all fields (except roles) are returned.</li>
-     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token.</li>
+     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token. Only directly assigned roles are returned. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</li>
      * </ul>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
@@ -133,6 +133,8 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Organizati
                 .addPathSegments("organizations")
                 .addPathSegment(id)
                 .addPathSegments("members");
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/ClientsClient.java b/src/main/java/com/auth0/client/mgmt/organizations/ClientsClient.java
new file mode 100644
index 00000000..e86f9712
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/organizations/ClientsClient.java
@@ -0,0 +1,156 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.organizations;
+
+import com.auth0.client.mgmt.core.ClientOptions;
+import com.auth0.client.mgmt.core.RequestOptions;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
+import com.auth0.client.mgmt.organizations.types.CreateOrganizationClientsRequestContent;
+import com.auth0.client.mgmt.organizations.types.DeleteOrganizationClientsRequestContent;
+import com.auth0.client.mgmt.organizations.types.ListOrganizationClientsRequestParameters;
+import com.auth0.client.mgmt.organizations.types.UpdateOrganizationClientRequestContent;
+import com.auth0.client.mgmt.types.GetOrganizationClientResponseContent;
+import com.auth0.client.mgmt.types.OrganizationClient;
+import com.auth0.client.mgmt.types.UpdateOrganizationClientResponseContent;
+import java.util.List;
+
+public class ClientsClient {
+    protected final ClientOptions clientOptions;
+
+    private final RawClientsClient rawClient;
+
+    public ClientsClient(ClientOptions clientOptions) {
+        this.clientOptions = clientOptions;
+        this.rawClient = new RawClientsClient(clientOptions);
+    }
+
+    /**
+     * Get responses with HTTP metadata like headers
+     */
+    public RawClientsClient withRawResponse() {
+        return this.rawClient;
+    }
+
+    /**
+     * List all clients associated with an organization, using checkpoint pagination.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+     *   </li>
+     * </ul></p>
+     */
+    public SyncPagingIterable<OrganizationClient> list(String id) {
+        return this.rawClient.list(id).body();
+    }
+
+    /**
+     * List all clients associated with an organization, using checkpoint pagination.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+     *   </li>
+     * </ul></p>
+     */
+    public SyncPagingIterable<OrganizationClient> list(String id, RequestOptions requestOptions) {
+        return this.rawClient.list(id, requestOptions).body();
+    }
+
+    /**
+     * List all clients associated with an organization, using checkpoint pagination.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+     *   </li>
+     * </ul></p>
+     */
+    public SyncPagingIterable<OrganizationClient> list(String id, ListOrganizationClientsRequestParameters request) {
+        return this.rawClient.list(id, request).body();
+    }
+
+    /**
+     * List all clients associated with an organization, using checkpoint pagination.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+     *   </li>
+     * </ul></p>
+     */
+    public SyncPagingIterable<OrganizationClient> list(
+            String id, ListOrganizationClientsRequestParameters request, RequestOptions requestOptions) {
+        return this.rawClient.list(id, request, requestOptions).body();
+    }
+
+    /**
+     * Associate one or more clients with an organization.
+     */
+    public List<OrganizationClient> create(String id, CreateOrganizationClientsRequestContent request) {
+        return this.rawClient.create(id, request).body();
+    }
+
+    /**
+     * Associate one or more clients with an organization.
+     */
+    public List<OrganizationClient> create(
+            String id, CreateOrganizationClientsRequestContent request, RequestOptions requestOptions) {
+        return this.rawClient.create(id, request, requestOptions).body();
+    }
+
+    /**
+     * Remove one or more client associations from an organization.
+     */
+    public void delete(String id, DeleteOrganizationClientsRequestContent request) {
+        this.rawClient.delete(id, request).body();
+    }
+
+    /**
+     * Remove one or more client associations from an organization.
+     */
+    public void delete(String id, DeleteOrganizationClientsRequestContent request, RequestOptions requestOptions) {
+        this.rawClient.delete(id, request, requestOptions).body();
+    }
+
+    /**
+     * Get a specific client association for an organization.
+     */
+    public GetOrganizationClientResponseContent get(String id, String clientId) {
+        return this.rawClient.get(id, clientId).body();
+    }
+
+    /**
+     * Get a specific client association for an organization.
+     */
+    public GetOrganizationClientResponseContent get(String id, String clientId, RequestOptions requestOptions) {
+        return this.rawClient.get(id, clientId, requestOptions).body();
+    }
+
+    /**
+     * Update an organization client association.
+     */
+    public UpdateOrganizationClientResponseContent update(String id, String clientId) {
+        return this.rawClient.update(id, clientId).body();
+    }
+
+    /**
+     * Update an organization client association.
+     */
+    public UpdateOrganizationClientResponseContent update(String id, String clientId, RequestOptions requestOptions) {
+        return this.rawClient.update(id, clientId, requestOptions).body();
+    }
+
+    /**
+     * Update an organization client association.
+     */
+    public UpdateOrganizationClientResponseContent update(
+            String id, String clientId, UpdateOrganizationClientRequestContent request) {
+        return this.rawClient.update(id, clientId, request).body();
+    }
+
+    /**
+     * Update an organization client association.
+     */
+    public UpdateOrganizationClientResponseContent update(
+            String id, String clientId, UpdateOrganizationClientRequestContent request, RequestOptions requestOptions) {
+        return this.rawClient.update(id, clientId, request, requestOptions).body();
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/MembersClient.java b/src/main/java/com/auth0/client/mgmt/organizations/MembersClient.java
index 7bdaaf16..6133dfd6 100644
--- a/src/main/java/com/auth0/client/mgmt/organizations/MembersClient.java
+++ b/src/main/java/com/auth0/client/mgmt/organizations/MembersClient.java
@@ -43,7 +43,7 @@ public RawMembersClient withRawResponse() {
      * This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
      * <ul>
      * <li>Use the <code>fields</code> parameter to optionally define the specific member details retrieved. If <code>fields</code> is left blank, all fields (except roles) are returned.</li>
-     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token.</li>
+     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token. Only directly assigned roles are returned. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</li>
      * </ul>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
@@ -63,7 +63,7 @@ public SyncPagingIterable<OrganizationMember> list(String id) {
      * This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
      * <ul>
      * <li>Use the <code>fields</code> parameter to optionally define the specific member details retrieved. If <code>fields</code> is left blank, all fields (except roles) are returned.</li>
-     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token.</li>
+     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token. Only directly assigned roles are returned. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</li>
      * </ul>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
@@ -83,7 +83,7 @@ public SyncPagingIterable<OrganizationMember> list(String id, RequestOptions req
      * This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
      * <ul>
      * <li>Use the <code>fields</code> parameter to optionally define the specific member details retrieved. If <code>fields</code> is left blank, all fields (except roles) are returned.</li>
-     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token.</li>
+     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token. Only directly assigned roles are returned. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</li>
      * </ul>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
@@ -103,7 +103,7 @@ public SyncPagingIterable<OrganizationMember> list(String id, ListOrganizationMe
      * This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
      * <ul>
      * <li>Use the <code>fields</code> parameter to optionally define the specific member details retrieved. If <code>fields</code> is left blank, all fields (except roles) are returned.</li>
-     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token.</li>
+     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token. Only directly assigned roles are returned. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</li>
      * </ul>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/RawClientsClient.java b/src/main/java/com/auth0/client/mgmt/organizations/RawClientsClient.java
new file mode 100644
index 00000000..3f317273
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/organizations/RawClientsClient.java
@@ -0,0 +1,551 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.organizations;
+
+import com.auth0.client.mgmt.core.ClientOptions;
+import com.auth0.client.mgmt.core.ManagementApiException;
+import com.auth0.client.mgmt.core.ManagementApiHttpResponse;
+import com.auth0.client.mgmt.core.ManagementException;
+import com.auth0.client.mgmt.core.MediaTypes;
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.core.QueryStringMapper;
+import com.auth0.client.mgmt.core.RequestOptions;
+import com.auth0.client.mgmt.core.RetryInterceptor;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
+import com.auth0.client.mgmt.errors.BadRequestError;
+import com.auth0.client.mgmt.errors.ConflictError;
+import com.auth0.client.mgmt.errors.ForbiddenError;
+import com.auth0.client.mgmt.errors.NotFoundError;
+import com.auth0.client.mgmt.errors.TooManyRequestsError;
+import com.auth0.client.mgmt.errors.UnauthorizedError;
+import com.auth0.client.mgmt.organizations.types.CreateOrganizationClientsRequestContent;
+import com.auth0.client.mgmt.organizations.types.DeleteOrganizationClientsRequestContent;
+import com.auth0.client.mgmt.organizations.types.ListOrganizationClientsRequestParameters;
+import com.auth0.client.mgmt.organizations.types.UpdateOrganizationClientRequestContent;
+import com.auth0.client.mgmt.types.GetOrganizationClientResponseContent;
+import com.auth0.client.mgmt.types.ListOrganizationClientsResponseContent;
+import com.auth0.client.mgmt.types.OrganizationClient;
+import com.auth0.client.mgmt.types.UpdateOrganizationClientResponseContent;
+import com.fasterxml.jackson.core.JsonProcessingException;
+import com.fasterxml.jackson.core.type.TypeReference;
+import java.io.IOException;
+import java.util.List;
+import java.util.Optional;
+import okhttp3.Headers;
+import okhttp3.HttpUrl;
+import okhttp3.OkHttpClient;
+import okhttp3.Request;
+import okhttp3.RequestBody;
+import okhttp3.Response;
+import okhttp3.ResponseBody;
+
+public class RawClientsClient {
+    protected final ClientOptions clientOptions;
+
+    public RawClientsClient(ClientOptions clientOptions) {
+        this.clientOptions = clientOptions;
+    }
+
+    /**
+     * List all clients associated with an organization, using checkpoint pagination.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+     *   </li>
+     * </ul></p>
+     */
+    public ManagementApiHttpResponse<SyncPagingIterable<OrganizationClient>> list(String id) {
+        return list(id, ListOrganizationClientsRequestParameters.builder().build());
+    }
+
+    /**
+     * List all clients associated with an organization, using checkpoint pagination.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+     *   </li>
+     * </ul></p>
+     */
+    public ManagementApiHttpResponse<SyncPagingIterable<OrganizationClient>> list(
+            String id, RequestOptions requestOptions) {
+        return list(id, ListOrganizationClientsRequestParameters.builder().build(), requestOptions);
+    }
+
+    /**
+     * List all clients associated with an organization, using checkpoint pagination.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+     *   </li>
+     * </ul></p>
+     */
+    public ManagementApiHttpResponse<SyncPagingIterable<OrganizationClient>> list(
+            String id, ListOrganizationClientsRequestParameters request) {
+        return list(id, request, null);
+    }
+
+    /**
+     * List all clients associated with an organization, using checkpoint pagination.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+     *   </li>
+     * </ul></p>
+     */
+    public ManagementApiHttpResponse<SyncPagingIterable<OrganizationClient>> list(
+            String id, ListOrganizationClientsRequestParameters request, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("organizations")
+                .addPathSegment(id)
+                .addPathSegments("clients");
+        if (!request.getFrom().isAbsent()) {
+            QueryStringMapper.addQueryParameter(
+                    httpUrl, "from", request.getFrom().orElse(null), false);
+        }
+        QueryStringMapper.addQueryParameter(httpUrl, "take", request.getTake().orElse(50), false);
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        Request.Builder _requestBuilder = new Request.Builder()
+                .url(httpUrl.build())
+                .method("GET", null)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Accept", "application/json");
+        Request okhttpRequest = _requestBuilder.build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        try (Response response = client.newCall(okhttpRequest).execute()) {
+            ResponseBody responseBody = response.body();
+            String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+            if (response.isSuccessful()) {
+                ListOrganizationClientsResponseContent parsedResponse = ObjectMappers.JSON_MAPPER.readValue(
+                        responseBodyString, ListOrganizationClientsResponseContent.class);
+                Optional<String> startingAfter = parsedResponse.getNext();
+                ListOrganizationClientsRequestParameters nextRequest =
+                        ListOrganizationClientsRequestParameters.builder()
+                                .from(request)
+                                .from(startingAfter)
+                                .build();
+                List<OrganizationClient> result = parsedResponse.getClients();
+                return new ManagementApiHttpResponse<>(
+                        new SyncPagingIterable<OrganizationClient>(
+                                startingAfter.isPresent(), result, parsedResponse, () -> list(
+                                                id, nextRequest, requestOptions)
+                                        .body()),
+                        response);
+            }
+            try {
+                switch (response.code()) {
+                    case 400:
+                        throw new BadRequestError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 401:
+                        throw new UnauthorizedError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 403:
+                        throw new ForbiddenError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 404:
+                        throw new NotFoundError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 429:
+                        throw new TooManyRequestsError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                }
+            } catch (JsonProcessingException ignored) {
+                // unable to map error response, throwing generic error
+            }
+            Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+            throw new ManagementApiException(
+                    "Error with status code " + response.code(), response.code(), errorBody, response);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to deserialize response: " + e.getMessage(), e);
+        } catch (IOException e) {
+            throw new ManagementException("Network error executing HTTP request", e);
+        }
+    }
+
+    /**
+     * Associate one or more clients with an organization.
+     */
+    public ManagementApiHttpResponse<List<OrganizationClient>> create(
+            String id, CreateOrganizationClientsRequestContent request) {
+        return create(id, request, null);
+    }
+
+    /**
+     * Associate one or more clients with an organization.
+     */
+    public ManagementApiHttpResponse<List<OrganizationClient>> create(
+            String id, CreateOrganizationClientsRequestContent request, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("organizations")
+                .addPathSegment(id)
+                .addPathSegments("clients");
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        RequestBody body;
+        try {
+            body = RequestBody.create(
+                    ObjectMappers.JSON_MAPPER.writeValueAsBytes(request), MediaTypes.APPLICATION_JSON);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to serialize request", e);
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("POST", body)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Content-Type", "application/json")
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        try (Response response = client.newCall(okhttpRequest).execute()) {
+            ResponseBody responseBody = response.body();
+            String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+            if (response.isSuccessful()) {
+                return new ManagementApiHttpResponse<>(
+                        ObjectMappers.JSON_MAPPER.readValue(
+                                responseBodyString, new TypeReference<List<OrganizationClient>>() {}),
+                        response);
+            }
+            try {
+                switch (response.code()) {
+                    case 400:
+                        throw new BadRequestError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 401:
+                        throw new UnauthorizedError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 403:
+                        throw new ForbiddenError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 404:
+                        throw new NotFoundError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 409:
+                        throw new ConflictError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 429:
+                        throw new TooManyRequestsError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                }
+            } catch (JsonProcessingException ignored) {
+                // unable to map error response, throwing generic error
+            }
+            Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+            throw new ManagementApiException(
+                    "Error with status code " + response.code(), response.code(), errorBody, response);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to deserialize response: " + e.getMessage(), e);
+        } catch (IOException e) {
+            throw new ManagementException("Network error executing HTTP request", e);
+        }
+    }
+
+    /**
+     * Remove one or more client associations from an organization.
+     */
+    public ManagementApiHttpResponse<Void> delete(String id, DeleteOrganizationClientsRequestContent request) {
+        return delete(id, request, null);
+    }
+
+    /**
+     * Remove one or more client associations from an organization.
+     */
+    public ManagementApiHttpResponse<Void> delete(
+            String id, DeleteOrganizationClientsRequestContent request, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("organizations")
+                .addPathSegment(id)
+                .addPathSegments("clients");
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        RequestBody body;
+        try {
+            body = RequestBody.create(
+                    ObjectMappers.JSON_MAPPER.writeValueAsBytes(request), MediaTypes.APPLICATION_JSON);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to serialize request", e);
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("DELETE", body)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Content-Type", "application/json")
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        try (Response response = client.newCall(okhttpRequest).execute()) {
+            ResponseBody responseBody = response.body();
+            if (response.isSuccessful()) {
+                return new ManagementApiHttpResponse<>(null, response);
+            }
+            String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+            try {
+                switch (response.code()) {
+                    case 400:
+                        throw new BadRequestError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 401:
+                        throw new UnauthorizedError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 403:
+                        throw new ForbiddenError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 404:
+                        throw new NotFoundError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 429:
+                        throw new TooManyRequestsError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                }
+            } catch (JsonProcessingException ignored) {
+                // unable to map error response, throwing generic error
+            }
+            Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+            throw new ManagementApiException(
+                    "Error with status code " + response.code(), response.code(), errorBody, response);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to deserialize response: " + e.getMessage(), e);
+        } catch (IOException e) {
+            throw new ManagementException("Network error executing HTTP request", e);
+        }
+    }
+
+    /**
+     * Get a specific client association for an organization.
+     */
+    public ManagementApiHttpResponse<GetOrganizationClientResponseContent> get(String id, String clientId) {
+        return get(id, clientId, null);
+    }
+
+    /**
+     * Get a specific client association for an organization.
+     */
+    public ManagementApiHttpResponse<GetOrganizationClientResponseContent> get(
+            String id, String clientId, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("organizations")
+                .addPathSegment(id)
+                .addPathSegments("clients")
+                .addPathSegment(clientId);
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("GET", null)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        try (Response response = client.newCall(okhttpRequest).execute()) {
+            ResponseBody responseBody = response.body();
+            String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+            if (response.isSuccessful()) {
+                return new ManagementApiHttpResponse<>(
+                        ObjectMappers.JSON_MAPPER.readValue(
+                                responseBodyString, GetOrganizationClientResponseContent.class),
+                        response);
+            }
+            try {
+                switch (response.code()) {
+                    case 400:
+                        throw new BadRequestError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 401:
+                        throw new UnauthorizedError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 403:
+                        throw new ForbiddenError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 404:
+                        throw new NotFoundError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 429:
+                        throw new TooManyRequestsError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                }
+            } catch (JsonProcessingException ignored) {
+                // unable to map error response, throwing generic error
+            }
+            Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+            throw new ManagementApiException(
+                    "Error with status code " + response.code(), response.code(), errorBody, response);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to deserialize response: " + e.getMessage(), e);
+        } catch (IOException e) {
+            throw new ManagementException("Network error executing HTTP request", e);
+        }
+    }
+
+    /**
+     * Update an organization client association.
+     */
+    public ManagementApiHttpResponse<UpdateOrganizationClientResponseContent> update(String id, String clientId) {
+        return update(
+                id, clientId, UpdateOrganizationClientRequestContent.builder().build());
+    }
+
+    /**
+     * Update an organization client association.
+     */
+    public ManagementApiHttpResponse<UpdateOrganizationClientResponseContent> update(
+            String id, String clientId, RequestOptions requestOptions) {
+        return update(
+                id, clientId, UpdateOrganizationClientRequestContent.builder().build(), requestOptions);
+    }
+
+    /**
+     * Update an organization client association.
+     */
+    public ManagementApiHttpResponse<UpdateOrganizationClientResponseContent> update(
+            String id, String clientId, UpdateOrganizationClientRequestContent request) {
+        return update(id, clientId, request, null);
+    }
+
+    /**
+     * Update an organization client association.
+     */
+    public ManagementApiHttpResponse<UpdateOrganizationClientResponseContent> update(
+            String id, String clientId, UpdateOrganizationClientRequestContent request, RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("organizations")
+                .addPathSegment(id)
+                .addPathSegments("clients")
+                .addPathSegment(clientId);
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        RequestBody body;
+        try {
+            body = RequestBody.create(
+                    ObjectMappers.JSON_MAPPER.writeValueAsBytes(request), MediaTypes.APPLICATION_JSON);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to serialize request", e);
+        }
+        Request okhttpRequest = new Request.Builder()
+                .url(httpUrl.build())
+                .method("PATCH", body)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Content-Type", "application/json")
+                .addHeader("Accept", "application/json")
+                .build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        try (Response response = client.newCall(okhttpRequest).execute()) {
+            ResponseBody responseBody = response.body();
+            String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+            if (response.isSuccessful()) {
+                return new ManagementApiHttpResponse<>(
+                        ObjectMappers.JSON_MAPPER.readValue(
+                                responseBodyString, UpdateOrganizationClientResponseContent.class),
+                        response);
+            }
+            try {
+                switch (response.code()) {
+                    case 400:
+                        throw new BadRequestError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 401:
+                        throw new UnauthorizedError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 403:
+                        throw new ForbiddenError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 404:
+                        throw new NotFoundError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 429:
+                        throw new TooManyRequestsError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                }
+            } catch (JsonProcessingException ignored) {
+                // unable to map error response, throwing generic error
+            }
+            Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+            throw new ManagementApiException(
+                    "Error with status code " + response.code(), response.code(), errorBody, response);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to deserialize response: " + e.getMessage(), e);
+        } catch (IOException e) {
+            throw new ManagementException("Network error executing HTTP request", e);
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/RawEnabledConnectionsClient.java b/src/main/java/com/auth0/client/mgmt/organizations/RawEnabledConnectionsClient.java
index 71f718b0..b464acd1 100644
--- a/src/main/java/com/auth0/client/mgmt/organizations/RawEnabledConnectionsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/organizations/RawEnabledConnectionsClient.java
@@ -14,6 +14,7 @@
 import com.auth0.client.mgmt.core.RetryInterceptor;
 import com.auth0.client.mgmt.core.SyncPagingIterable;
 import com.auth0.client.mgmt.errors.BadRequestError;
+import com.auth0.client.mgmt.errors.ConflictError;
 import com.auth0.client.mgmt.errors.ForbiddenError;
 import com.auth0.client.mgmt.errors.NotFoundError;
 import com.auth0.client.mgmt.errors.TooManyRequestsError;
@@ -235,6 +236,9 @@ public ManagementApiHttpResponse<AddOrganizationConnectionResponseContent> add(
                     case 404:
                         throw new NotFoundError(
                                 ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 409:
+                        throw new ConflictError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
                     case 429:
                         throw new TooManyRequestsError(
                                 ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/RawMembersClient.java b/src/main/java/com/auth0/client/mgmt/organizations/RawMembersClient.java
index 54b71bdf..1cad3d2f 100644
--- a/src/main/java/com/auth0/client/mgmt/organizations/RawMembersClient.java
+++ b/src/main/java/com/auth0/client/mgmt/organizations/RawMembersClient.java
@@ -48,7 +48,7 @@ public RawMembersClient(ClientOptions clientOptions) {
      * This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
      * <ul>
      * <li>Use the <code>fields</code> parameter to optionally define the specific member details retrieved. If <code>fields</code> is left blank, all fields (except roles) are returned.</li>
-     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token.</li>
+     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token. Only directly assigned roles are returned. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</li>
      * </ul>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
@@ -68,7 +68,7 @@ public ManagementApiHttpResponse<SyncPagingIterable<OrganizationMember>> list(St
      * This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
      * <ul>
      * <li>Use the <code>fields</code> parameter to optionally define the specific member details retrieved. If <code>fields</code> is left blank, all fields (except roles) are returned.</li>
-     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token.</li>
+     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token. Only directly assigned roles are returned. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</li>
      * </ul>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
@@ -89,7 +89,7 @@ public ManagementApiHttpResponse<SyncPagingIterable<OrganizationMember>> list(
      * This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
      * <ul>
      * <li>Use the <code>fields</code> parameter to optionally define the specific member details retrieved. If <code>fields</code> is left blank, all fields (except roles) are returned.</li>
-     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token.</li>
+     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token. Only directly assigned roles are returned. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</li>
      * </ul>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
@@ -110,7 +110,7 @@ public ManagementApiHttpResponse<SyncPagingIterable<OrganizationMember>> list(
      * This endpoint is subject to eventual consistency. New users may not be immediately included in the response and deleted users may not be immediately removed from it.
      * <ul>
      * <li>Use the <code>fields</code> parameter to optionally define the specific member details retrieved. If <code>fields</code> is left blank, all fields (except roles) are returned.</li>
-     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token.</li>
+     * <li>Member roles are not sent by default. Use <code>fields=roles</code> to retrieve the roles assigned to each listed member. To use this parameter, you must include the <code>read:organization_member_roles</code> scope in the token. Only directly assigned roles are returned. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</li>
      * </ul>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
@@ -128,6 +128,8 @@ public ManagementApiHttpResponse<SyncPagingIterable<OrganizationMember>> list(
                 .addPathSegments("organizations")
                 .addPathSegment(id)
                 .addPathSegments("members");
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/members/AsyncRawRolesClient.java b/src/main/java/com/auth0/client/mgmt/organizations/members/AsyncRawRolesClient.java
index 1d4c6894..8c47c085 100644
--- a/src/main/java/com/auth0/client/mgmt/organizations/members/AsyncRawRolesClient.java
+++ b/src/main/java/com/auth0/client/mgmt/organizations/members/AsyncRawRolesClient.java
@@ -51,6 +51,7 @@ public AsyncRawRolesClient(ClientOptions clientOptions) {
     /**
      * Retrieve detailed list of roles assigned to a given user within the context of a specific Organization.
      * <p>Users can be members of multiple Organizations with unique roles assigned for each membership. This action only returns the roles associated with the specified Organization; any roles assigned to the user within other Organizations are not included.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments for this member. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</p>
      */
     public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Role>>> list(String id, String userId) {
         return list(
@@ -62,6 +63,7 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Role>>> li
     /**
      * Retrieve detailed list of roles assigned to a given user within the context of a specific Organization.
      * <p>Users can be members of multiple Organizations with unique roles assigned for each membership. This action only returns the roles associated with the specified Organization; any roles assigned to the user within other Organizations are not included.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments for this member. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</p>
      */
     public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Role>>> list(
             String id, String userId, RequestOptions requestOptions) {
@@ -75,6 +77,7 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Role>>> li
     /**
      * Retrieve detailed list of roles assigned to a given user within the context of a specific Organization.
      * <p>Users can be members of multiple Organizations with unique roles assigned for each membership. This action only returns the roles associated with the specified Organization; any roles assigned to the user within other Organizations are not included.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments for this member. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</p>
      */
     public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Role>>> list(
             String id, String userId, ListOrganizationMemberRolesRequestParameters request) {
@@ -84,6 +87,7 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Role>>> li
     /**
      * Retrieve detailed list of roles assigned to a given user within the context of a specific Organization.
      * <p>Users can be members of multiple Organizations with unique roles assigned for each membership. This action only returns the roles associated with the specified Organization; any roles assigned to the user within other Organizations are not included.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments for this member. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</p>
      */
     public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Role>>> list(
             String id,
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/members/AsyncRolesClient.java b/src/main/java/com/auth0/client/mgmt/organizations/members/AsyncRolesClient.java
index a7a22e10..e2b0abbc 100644
--- a/src/main/java/com/auth0/client/mgmt/organizations/members/AsyncRolesClient.java
+++ b/src/main/java/com/auth0/client/mgmt/organizations/members/AsyncRolesClient.java
@@ -32,6 +32,7 @@ public AsyncRawRolesClient withRawResponse() {
     /**
      * Retrieve detailed list of roles assigned to a given user within the context of a specific Organization.
      * <p>Users can be members of multiple Organizations with unique roles assigned for each membership. This action only returns the roles associated with the specified Organization; any roles assigned to the user within other Organizations are not included.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments for this member. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</p>
      */
     public CompletableFuture<SyncPagingIterable<Role>> list(String id, String userId) {
         return this.rawClient.list(id, userId).thenApply(response -> response.body());
@@ -40,6 +41,7 @@ public CompletableFuture<SyncPagingIterable<Role>> list(String id, String userId
     /**
      * Retrieve detailed list of roles assigned to a given user within the context of a specific Organization.
      * <p>Users can be members of multiple Organizations with unique roles assigned for each membership. This action only returns the roles associated with the specified Organization; any roles assigned to the user within other Organizations are not included.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments for this member. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</p>
      */
     public CompletableFuture<SyncPagingIterable<Role>> list(String id, String userId, RequestOptions requestOptions) {
         return this.rawClient.list(id, userId, requestOptions).thenApply(response -> response.body());
@@ -48,6 +50,7 @@ public CompletableFuture<SyncPagingIterable<Role>> list(String id, String userId
     /**
      * Retrieve detailed list of roles assigned to a given user within the context of a specific Organization.
      * <p>Users can be members of multiple Organizations with unique roles assigned for each membership. This action only returns the roles associated with the specified Organization; any roles assigned to the user within other Organizations are not included.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments for this member. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</p>
      */
     public CompletableFuture<SyncPagingIterable<Role>> list(
             String id, String userId, ListOrganizationMemberRolesRequestParameters request) {
@@ -57,6 +60,7 @@ public CompletableFuture<SyncPagingIterable<Role>> list(
     /**
      * Retrieve detailed list of roles assigned to a given user within the context of a specific Organization.
      * <p>Users can be members of multiple Organizations with unique roles assigned for each membership. This action only returns the roles associated with the specified Organization; any roles assigned to the user within other Organizations are not included.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments for this member. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</p>
      */
     public CompletableFuture<SyncPagingIterable<Role>> list(
             String id,
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/members/RawRolesClient.java b/src/main/java/com/auth0/client/mgmt/organizations/members/RawRolesClient.java
index fc7665e3..f5030e78 100644
--- a/src/main/java/com/auth0/client/mgmt/organizations/members/RawRolesClient.java
+++ b/src/main/java/com/auth0/client/mgmt/organizations/members/RawRolesClient.java
@@ -46,6 +46,7 @@ public RawRolesClient(ClientOptions clientOptions) {
     /**
      * Retrieve detailed list of roles assigned to a given user within the context of a specific Organization.
      * <p>Users can be members of multiple Organizations with unique roles assigned for each membership. This action only returns the roles associated with the specified Organization; any roles assigned to the user within other Organizations are not included.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments for this member. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</p>
      */
     public ManagementApiHttpResponse<SyncPagingIterable<Role>> list(String id, String userId) {
         return list(
@@ -57,6 +58,7 @@ public ManagementApiHttpResponse<SyncPagingIterable<Role>> list(String id, Strin
     /**
      * Retrieve detailed list of roles assigned to a given user within the context of a specific Organization.
      * <p>Users can be members of multiple Organizations with unique roles assigned for each membership. This action only returns the roles associated with the specified Organization; any roles assigned to the user within other Organizations are not included.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments for this member. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</p>
      */
     public ManagementApiHttpResponse<SyncPagingIterable<Role>> list(
             String id, String userId, RequestOptions requestOptions) {
@@ -70,6 +72,7 @@ public ManagementApiHttpResponse<SyncPagingIterable<Role>> list(
     /**
      * Retrieve detailed list of roles assigned to a given user within the context of a specific Organization.
      * <p>Users can be members of multiple Organizations with unique roles assigned for each membership. This action only returns the roles associated with the specified Organization; any roles assigned to the user within other Organizations are not included.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments for this member. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</p>
      */
     public ManagementApiHttpResponse<SyncPagingIterable<Role>> list(
             String id, String userId, ListOrganizationMemberRolesRequestParameters request) {
@@ -79,6 +82,7 @@ public ManagementApiHttpResponse<SyncPagingIterable<Role>> list(
     /**
      * Retrieve detailed list of roles assigned to a given user within the context of a specific Organization.
      * <p>Users can be members of multiple Organizations with unique roles assigned for each membership. This action only returns the roles associated with the specified Organization; any roles assigned to the user within other Organizations are not included.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments for this member. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</p>
      */
     public ManagementApiHttpResponse<SyncPagingIterable<Role>> list(
             String id,
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/members/RolesClient.java b/src/main/java/com/auth0/client/mgmt/organizations/members/RolesClient.java
index 2511b8e8..7a532ed5 100644
--- a/src/main/java/com/auth0/client/mgmt/organizations/members/RolesClient.java
+++ b/src/main/java/com/auth0/client/mgmt/organizations/members/RolesClient.java
@@ -31,6 +31,7 @@ public RawRolesClient withRawResponse() {
     /**
      * Retrieve detailed list of roles assigned to a given user within the context of a specific Organization.
      * <p>Users can be members of multiple Organizations with unique roles assigned for each membership. This action only returns the roles associated with the specified Organization; any roles assigned to the user within other Organizations are not included.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments for this member. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</p>
      */
     public SyncPagingIterable<Role> list(String id, String userId) {
         return this.rawClient.list(id, userId).body();
@@ -39,6 +40,7 @@ public SyncPagingIterable<Role> list(String id, String userId) {
     /**
      * Retrieve detailed list of roles assigned to a given user within the context of a specific Organization.
      * <p>Users can be members of multiple Organizations with unique roles assigned for each membership. This action only returns the roles associated with the specified Organization; any roles assigned to the user within other Organizations are not included.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments for this member. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</p>
      */
     public SyncPagingIterable<Role> list(String id, String userId, RequestOptions requestOptions) {
         return this.rawClient.list(id, userId, requestOptions).body();
@@ -47,6 +49,7 @@ public SyncPagingIterable<Role> list(String id, String userId, RequestOptions re
     /**
      * Retrieve detailed list of roles assigned to a given user within the context of a specific Organization.
      * <p>Users can be members of multiple Organizations with unique roles assigned for each membership. This action only returns the roles associated with the specified Organization; any roles assigned to the user within other Organizations are not included.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments for this member. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</p>
      */
     public SyncPagingIterable<Role> list(
             String id, String userId, ListOrganizationMemberRolesRequestParameters request) {
@@ -56,6 +59,7 @@ public SyncPagingIterable<Role> list(
     /**
      * Retrieve detailed list of roles assigned to a given user within the context of a specific Organization.
      * <p>Users can be members of multiple Organizations with unique roles assigned for each membership. This action only returns the roles associated with the specified Organization; any roles assigned to the user within other Organizations are not included.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments for this member. To also include group-based role assignments, use <code>GET /api/v2/organizations/{id}/members/{user_id}/effective-roles</code>.</p>
      */
     public SyncPagingIterable<Role> list(
             String id,
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/roles/AsyncGroupsClient.java b/src/main/java/com/auth0/client/mgmt/organizations/roles/AsyncGroupsClient.java
new file mode 100644
index 00000000..ae6ef007
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/organizations/roles/AsyncGroupsClient.java
@@ -0,0 +1,65 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.organizations.roles;
+
+import com.auth0.client.mgmt.core.ClientOptions;
+import com.auth0.client.mgmt.core.RequestOptions;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
+import com.auth0.client.mgmt.organizations.roles.types.ListOrganizationRoleGroupsRequestParameters;
+import com.auth0.client.mgmt.types.RoleGroup;
+import java.util.concurrent.CompletableFuture;
+
+public class AsyncGroupsClient {
+    protected final ClientOptions clientOptions;
+
+    private final AsyncRawGroupsClient rawClient;
+
+    public AsyncGroupsClient(ClientOptions clientOptions) {
+        this.clientOptions = clientOptions;
+        this.rawClient = new AsyncRawGroupsClient(clientOptions);
+    }
+
+    /**
+     * Get responses with HTTP metadata like headers
+     */
+    public AsyncRawGroupsClient withRawResponse() {
+        return this.rawClient;
+    }
+
+    /**
+     * Retrieve the list of groups assigned to a role in the context of an organization.
+     */
+    public CompletableFuture<SyncPagingIterable<RoleGroup>> list(String organizationId, String roleId) {
+        return this.rawClient.list(organizationId, roleId).thenApply(response -> response.body());
+    }
+
+    /**
+     * Retrieve the list of groups assigned to a role in the context of an organization.
+     */
+    public CompletableFuture<SyncPagingIterable<RoleGroup>> list(
+            String organizationId, String roleId, RequestOptions requestOptions) {
+        return this.rawClient.list(organizationId, roleId, requestOptions).thenApply(response -> response.body());
+    }
+
+    /**
+     * Retrieve the list of groups assigned to a role in the context of an organization.
+     */
+    public CompletableFuture<SyncPagingIterable<RoleGroup>> list(
+            String organizationId, String roleId, ListOrganizationRoleGroupsRequestParameters request) {
+        return this.rawClient.list(organizationId, roleId, request).thenApply(response -> response.body());
+    }
+
+    /**
+     * Retrieve the list of groups assigned to a role in the context of an organization.
+     */
+    public CompletableFuture<SyncPagingIterable<RoleGroup>> list(
+            String organizationId,
+            String roleId,
+            ListOrganizationRoleGroupsRequestParameters request,
+            RequestOptions requestOptions) {
+        return this.rawClient
+                .list(organizationId, roleId, request, requestOptions)
+                .thenApply(response -> response.body());
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/roles/AsyncMembersClient.java b/src/main/java/com/auth0/client/mgmt/organizations/roles/AsyncMembersClient.java
index 3363e454..1133defa 100644
--- a/src/main/java/com/auth0/client/mgmt/organizations/roles/AsyncMembersClient.java
+++ b/src/main/java/com/auth0/client/mgmt/organizations/roles/AsyncMembersClient.java
@@ -29,6 +29,11 @@ public AsyncRawMembersClient withRawResponse() {
 
     /**
      * List the organization members assigned a specific role within the context of an organization.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: Returns only members with direct role assignments. For groups assigned to this role within the organization, use <code>GET /api/v2/organizations/{organization_id}/roles/{role_id}/groups</code>.
+     *   </li>
+     * </ul></p>
      */
     public CompletableFuture<SyncPagingIterable<RoleMember>> list(String id, String roleId) {
         return this.rawClient.list(id, roleId).thenApply(response -> response.body());
@@ -36,6 +41,11 @@ public CompletableFuture<SyncPagingIterable<RoleMember>> list(String id, String
 
     /**
      * List the organization members assigned a specific role within the context of an organization.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: Returns only members with direct role assignments. For groups assigned to this role within the organization, use <code>GET /api/v2/organizations/{organization_id}/roles/{role_id}/groups</code>.
+     *   </li>
+     * </ul></p>
      */
     public CompletableFuture<SyncPagingIterable<RoleMember>> list(
             String id, String roleId, RequestOptions requestOptions) {
@@ -44,6 +54,11 @@ public CompletableFuture<SyncPagingIterable<RoleMember>> list(
 
     /**
      * List the organization members assigned a specific role within the context of an organization.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: Returns only members with direct role assignments. For groups assigned to this role within the organization, use <code>GET /api/v2/organizations/{organization_id}/roles/{role_id}/groups</code>.
+     *   </li>
+     * </ul></p>
      */
     public CompletableFuture<SyncPagingIterable<RoleMember>> list(
             String id, String roleId, ListOrganizationRoleMembersRequestParameters request) {
@@ -52,6 +67,11 @@ public CompletableFuture<SyncPagingIterable<RoleMember>> list(
 
     /**
      * List the organization members assigned a specific role within the context of an organization.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: Returns only members with direct role assignments. For groups assigned to this role within the organization, use <code>GET /api/v2/organizations/{organization_id}/roles/{role_id}/groups</code>.
+     *   </li>
+     * </ul></p>
      */
     public CompletableFuture<SyncPagingIterable<RoleMember>> list(
             String id,
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/roles/AsyncRawGroupsClient.java b/src/main/java/com/auth0/client/mgmt/organizations/roles/AsyncRawGroupsClient.java
new file mode 100644
index 00000000..0efd9e0f
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/organizations/roles/AsyncRawGroupsClient.java
@@ -0,0 +1,201 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.organizations.roles;
+
+import com.auth0.client.mgmt.core.ClientOptions;
+import com.auth0.client.mgmt.core.ManagementApiException;
+import com.auth0.client.mgmt.core.ManagementApiHttpResponse;
+import com.auth0.client.mgmt.core.ManagementException;
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.core.QueryStringMapper;
+import com.auth0.client.mgmt.core.RequestOptions;
+import com.auth0.client.mgmt.core.RetryInterceptor;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
+import com.auth0.client.mgmt.errors.BadRequestError;
+import com.auth0.client.mgmt.errors.ForbiddenError;
+import com.auth0.client.mgmt.errors.NotFoundError;
+import com.auth0.client.mgmt.errors.TooManyRequestsError;
+import com.auth0.client.mgmt.errors.UnauthorizedError;
+import com.auth0.client.mgmt.organizations.roles.types.ListOrganizationRoleGroupsRequestParameters;
+import com.auth0.client.mgmt.types.ListOrganizationRoleGroupsResponseContent;
+import com.auth0.client.mgmt.types.RoleGroup;
+import com.fasterxml.jackson.core.JsonProcessingException;
+import java.io.IOException;
+import java.util.List;
+import java.util.Optional;
+import java.util.concurrent.CompletableFuture;
+import java.util.concurrent.ExecutionException;
+import okhttp3.Call;
+import okhttp3.Callback;
+import okhttp3.Headers;
+import okhttp3.HttpUrl;
+import okhttp3.OkHttpClient;
+import okhttp3.Request;
+import okhttp3.Response;
+import okhttp3.ResponseBody;
+import org.jetbrains.annotations.NotNull;
+
+public class AsyncRawGroupsClient {
+    protected final ClientOptions clientOptions;
+
+    public AsyncRawGroupsClient(ClientOptions clientOptions) {
+        this.clientOptions = clientOptions;
+    }
+
+    /**
+     * Retrieve the list of groups assigned to a role in the context of an organization.
+     */
+    public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<RoleGroup>>> list(
+            String organizationId, String roleId) {
+        return list(
+                organizationId,
+                roleId,
+                ListOrganizationRoleGroupsRequestParameters.builder().build());
+    }
+
+    /**
+     * Retrieve the list of groups assigned to a role in the context of an organization.
+     */
+    public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<RoleGroup>>> list(
+            String organizationId, String roleId, RequestOptions requestOptions) {
+        return list(
+                organizationId,
+                roleId,
+                ListOrganizationRoleGroupsRequestParameters.builder().build(),
+                requestOptions);
+    }
+
+    /**
+     * Retrieve the list of groups assigned to a role in the context of an organization.
+     */
+    public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<RoleGroup>>> list(
+            String organizationId, String roleId, ListOrganizationRoleGroupsRequestParameters request) {
+        return list(organizationId, roleId, request, null);
+    }
+
+    /**
+     * Retrieve the list of groups assigned to a role in the context of an organization.
+     */
+    public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<RoleGroup>>> list(
+            String organizationId,
+            String roleId,
+            ListOrganizationRoleGroupsRequestParameters request,
+            RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("organizations")
+                .addPathSegment(organizationId)
+                .addPathSegments("roles")
+                .addPathSegment(roleId)
+                .addPathSegments("groups");
+        if (!request.getFrom().isAbsent()) {
+            QueryStringMapper.addQueryParameter(
+                    httpUrl, "from", request.getFrom().orElse(null), false);
+        }
+        QueryStringMapper.addQueryParameter(httpUrl, "take", request.getTake().orElse(50), false);
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        Request.Builder _requestBuilder = new Request.Builder()
+                .url(httpUrl.build())
+                .method("GET", null)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Accept", "application/json");
+        Request okhttpRequest = _requestBuilder.build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<RoleGroup>>> future = new CompletableFuture<>();
+        client.newCall(okhttpRequest).enqueue(new Callback() {
+            @Override
+            public void onResponse(@NotNull Call call, @NotNull Response response) throws IOException {
+                try (ResponseBody responseBody = response.body()) {
+                    String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+                    if (response.isSuccessful()) {
+                        ListOrganizationRoleGroupsResponseContent parsedResponse = ObjectMappers.JSON_MAPPER.readValue(
+                                responseBodyString, ListOrganizationRoleGroupsResponseContent.class);
+                        Optional<String> startingAfter = parsedResponse.getNext();
+                        ListOrganizationRoleGroupsRequestParameters nextRequest =
+                                ListOrganizationRoleGroupsRequestParameters.builder()
+                                        .from(request)
+                                        .from(startingAfter)
+                                        .build();
+                        List<RoleGroup> result = parsedResponse.getGroups();
+                        future.complete(new ManagementApiHttpResponse<>(
+                                new SyncPagingIterable<RoleGroup>(
+                                        startingAfter.isPresent(), result, parsedResponse, () -> {
+                                            try {
+                                                return list(organizationId, roleId, nextRequest, requestOptions)
+                                                        .get()
+                                                        .body();
+                                            } catch (InterruptedException | ExecutionException e) {
+                                                throw new RuntimeException(e);
+                                            }
+                                        }),
+                                response));
+                        return;
+                    }
+                    try {
+                        switch (response.code()) {
+                            case 400:
+                                future.completeExceptionally(new BadRequestError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 401:
+                                future.completeExceptionally(new UnauthorizedError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 403:
+                                future.completeExceptionally(new ForbiddenError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 404:
+                                future.completeExceptionally(new NotFoundError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                            case 429:
+                                future.completeExceptionally(new TooManyRequestsError(
+                                        ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class),
+                                        response));
+                                return;
+                        }
+                    } catch (JsonProcessingException ignored) {
+                        // unable to map error response, throwing generic error
+                    }
+                    Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+                    future.completeExceptionally(new ManagementApiException(
+                            "Error with status code " + response.code(), response.code(), errorBody, response));
+                    return;
+                } catch (JsonProcessingException e) {
+                    future.completeExceptionally(
+                            new ManagementException("Failed to deserialize response: " + e.getMessage(), e));
+                } catch (IOException e) {
+                    future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+                }
+            }
+
+            @Override
+            public void onFailure(@NotNull Call call, @NotNull IOException e) {
+                future.completeExceptionally(new ManagementException("Network error executing HTTP request", e));
+            }
+        });
+        return future;
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/roles/AsyncRawMembersClient.java b/src/main/java/com/auth0/client/mgmt/organizations/roles/AsyncRawMembersClient.java
index a346afaa..cab91156 100644
--- a/src/main/java/com/auth0/client/mgmt/organizations/roles/AsyncRawMembersClient.java
+++ b/src/main/java/com/auth0/client/mgmt/organizations/roles/AsyncRawMembersClient.java
@@ -45,6 +45,11 @@ public AsyncRawMembersClient(ClientOptions clientOptions) {
 
     /**
      * List the organization members assigned a specific role within the context of an organization.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: Returns only members with direct role assignments. For groups assigned to this role within the organization, use <code>GET /api/v2/organizations/{organization_id}/roles/{role_id}/groups</code>.
+     *   </li>
+     * </ul></p>
      */
     public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<RoleMember>>> list(String id, String roleId) {
         return list(
@@ -55,6 +60,11 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<RoleMember
 
     /**
      * List the organization members assigned a specific role within the context of an organization.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: Returns only members with direct role assignments. For groups assigned to this role within the organization, use <code>GET /api/v2/organizations/{organization_id}/roles/{role_id}/groups</code>.
+     *   </li>
+     * </ul></p>
      */
     public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<RoleMember>>> list(
             String id, String roleId, RequestOptions requestOptions) {
@@ -67,6 +77,11 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<RoleMember
 
     /**
      * List the organization members assigned a specific role within the context of an organization.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: Returns only members with direct role assignments. For groups assigned to this role within the organization, use <code>GET /api/v2/organizations/{organization_id}/roles/{role_id}/groups</code>.
+     *   </li>
+     * </ul></p>
      */
     public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<RoleMember>>> list(
             String id, String roleId, ListOrganizationRoleMembersRequestParameters request) {
@@ -75,6 +90,11 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<RoleMember
 
     /**
      * List the organization members assigned a specific role within the context of an organization.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: Returns only members with direct role assignments. For groups assigned to this role within the organization, use <code>GET /api/v2/organizations/{organization_id}/roles/{role_id}/groups</code>.
+     *   </li>
+     * </ul></p>
      */
     public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<RoleMember>>> list(
             String id,
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/roles/AsyncRolesClient.java b/src/main/java/com/auth0/client/mgmt/organizations/roles/AsyncRolesClient.java
index 9144bd62..0b74b313 100644
--- a/src/main/java/com/auth0/client/mgmt/organizations/roles/AsyncRolesClient.java
+++ b/src/main/java/com/auth0/client/mgmt/organizations/roles/AsyncRolesClient.java
@@ -12,12 +12,19 @@ public class AsyncRolesClient {
 
     protected final Supplier<AsyncMembersClient> membersClient;
 
+    protected final Supplier<AsyncGroupsClient> groupsClient;
+
     public AsyncRolesClient(ClientOptions clientOptions) {
         this.clientOptions = clientOptions;
         this.membersClient = Suppliers.memoize(() -> new AsyncMembersClient(clientOptions));
+        this.groupsClient = Suppliers.memoize(() -> new AsyncGroupsClient(clientOptions));
     }
 
     public AsyncMembersClient members() {
         return this.membersClient.get();
     }
+
+    public AsyncGroupsClient groups() {
+        return this.groupsClient.get();
+    }
 }
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/roles/GroupsClient.java b/src/main/java/com/auth0/client/mgmt/organizations/roles/GroupsClient.java
new file mode 100644
index 00000000..1c65c3e3
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/organizations/roles/GroupsClient.java
@@ -0,0 +1,63 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.organizations.roles;
+
+import com.auth0.client.mgmt.core.ClientOptions;
+import com.auth0.client.mgmt.core.RequestOptions;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
+import com.auth0.client.mgmt.organizations.roles.types.ListOrganizationRoleGroupsRequestParameters;
+import com.auth0.client.mgmt.types.RoleGroup;
+
+public class GroupsClient {
+    protected final ClientOptions clientOptions;
+
+    private final RawGroupsClient rawClient;
+
+    public GroupsClient(ClientOptions clientOptions) {
+        this.clientOptions = clientOptions;
+        this.rawClient = new RawGroupsClient(clientOptions);
+    }
+
+    /**
+     * Get responses with HTTP metadata like headers
+     */
+    public RawGroupsClient withRawResponse() {
+        return this.rawClient;
+    }
+
+    /**
+     * Retrieve the list of groups assigned to a role in the context of an organization.
+     */
+    public SyncPagingIterable<RoleGroup> list(String organizationId, String roleId) {
+        return this.rawClient.list(organizationId, roleId).body();
+    }
+
+    /**
+     * Retrieve the list of groups assigned to a role in the context of an organization.
+     */
+    public SyncPagingIterable<RoleGroup> list(String organizationId, String roleId, RequestOptions requestOptions) {
+        return this.rawClient.list(organizationId, roleId, requestOptions).body();
+    }
+
+    /**
+     * Retrieve the list of groups assigned to a role in the context of an organization.
+     */
+    public SyncPagingIterable<RoleGroup> list(
+            String organizationId, String roleId, ListOrganizationRoleGroupsRequestParameters request) {
+        return this.rawClient.list(organizationId, roleId, request).body();
+    }
+
+    /**
+     * Retrieve the list of groups assigned to a role in the context of an organization.
+     */
+    public SyncPagingIterable<RoleGroup> list(
+            String organizationId,
+            String roleId,
+            ListOrganizationRoleGroupsRequestParameters request,
+            RequestOptions requestOptions) {
+        return this.rawClient
+                .list(organizationId, roleId, request, requestOptions)
+                .body();
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/roles/MembersClient.java b/src/main/java/com/auth0/client/mgmt/organizations/roles/MembersClient.java
index 510d57ae..0d752875 100644
--- a/src/main/java/com/auth0/client/mgmt/organizations/roles/MembersClient.java
+++ b/src/main/java/com/auth0/client/mgmt/organizations/roles/MembersClient.java
@@ -28,6 +28,11 @@ public RawMembersClient withRawResponse() {
 
     /**
      * List the organization members assigned a specific role within the context of an organization.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: Returns only members with direct role assignments. For groups assigned to this role within the organization, use <code>GET /api/v2/organizations/{organization_id}/roles/{role_id}/groups</code>.
+     *   </li>
+     * </ul></p>
      */
     public SyncPagingIterable<RoleMember> list(String id, String roleId) {
         return this.rawClient.list(id, roleId).body();
@@ -35,6 +40,11 @@ public SyncPagingIterable<RoleMember> list(String id, String roleId) {
 
     /**
      * List the organization members assigned a specific role within the context of an organization.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: Returns only members with direct role assignments. For groups assigned to this role within the organization, use <code>GET /api/v2/organizations/{organization_id}/roles/{role_id}/groups</code>.
+     *   </li>
+     * </ul></p>
      */
     public SyncPagingIterable<RoleMember> list(String id, String roleId, RequestOptions requestOptions) {
         return this.rawClient.list(id, roleId, requestOptions).body();
@@ -42,6 +52,11 @@ public SyncPagingIterable<RoleMember> list(String id, String roleId, RequestOpti
 
     /**
      * List the organization members assigned a specific role within the context of an organization.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: Returns only members with direct role assignments. For groups assigned to this role within the organization, use <code>GET /api/v2/organizations/{organization_id}/roles/{role_id}/groups</code>.
+     *   </li>
+     * </ul></p>
      */
     public SyncPagingIterable<RoleMember> list(
             String id, String roleId, ListOrganizationRoleMembersRequestParameters request) {
@@ -50,6 +65,11 @@ public SyncPagingIterable<RoleMember> list(
 
     /**
      * List the organization members assigned a specific role within the context of an organization.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: Returns only members with direct role assignments. For groups assigned to this role within the organization, use <code>GET /api/v2/organizations/{organization_id}/roles/{role_id}/groups</code>.
+     *   </li>
+     * </ul></p>
      */
     public SyncPagingIterable<RoleMember> list(
             String id,
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/roles/RawGroupsClient.java b/src/main/java/com/auth0/client/mgmt/organizations/roles/RawGroupsClient.java
new file mode 100644
index 00000000..ebdb6e6c
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/organizations/roles/RawGroupsClient.java
@@ -0,0 +1,164 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.organizations.roles;
+
+import com.auth0.client.mgmt.core.ClientOptions;
+import com.auth0.client.mgmt.core.ManagementApiException;
+import com.auth0.client.mgmt.core.ManagementApiHttpResponse;
+import com.auth0.client.mgmt.core.ManagementException;
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.core.QueryStringMapper;
+import com.auth0.client.mgmt.core.RequestOptions;
+import com.auth0.client.mgmt.core.RetryInterceptor;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
+import com.auth0.client.mgmt.errors.BadRequestError;
+import com.auth0.client.mgmt.errors.ForbiddenError;
+import com.auth0.client.mgmt.errors.NotFoundError;
+import com.auth0.client.mgmt.errors.TooManyRequestsError;
+import com.auth0.client.mgmt.errors.UnauthorizedError;
+import com.auth0.client.mgmt.organizations.roles.types.ListOrganizationRoleGroupsRequestParameters;
+import com.auth0.client.mgmt.types.ListOrganizationRoleGroupsResponseContent;
+import com.auth0.client.mgmt.types.RoleGroup;
+import com.fasterxml.jackson.core.JsonProcessingException;
+import java.io.IOException;
+import java.util.List;
+import java.util.Optional;
+import okhttp3.Headers;
+import okhttp3.HttpUrl;
+import okhttp3.OkHttpClient;
+import okhttp3.Request;
+import okhttp3.Response;
+import okhttp3.ResponseBody;
+
+public class RawGroupsClient {
+    protected final ClientOptions clientOptions;
+
+    public RawGroupsClient(ClientOptions clientOptions) {
+        this.clientOptions = clientOptions;
+    }
+
+    /**
+     * Retrieve the list of groups assigned to a role in the context of an organization.
+     */
+    public ManagementApiHttpResponse<SyncPagingIterable<RoleGroup>> list(String organizationId, String roleId) {
+        return list(
+                organizationId,
+                roleId,
+                ListOrganizationRoleGroupsRequestParameters.builder().build());
+    }
+
+    /**
+     * Retrieve the list of groups assigned to a role in the context of an organization.
+     */
+    public ManagementApiHttpResponse<SyncPagingIterable<RoleGroup>> list(
+            String organizationId, String roleId, RequestOptions requestOptions) {
+        return list(
+                organizationId,
+                roleId,
+                ListOrganizationRoleGroupsRequestParameters.builder().build(),
+                requestOptions);
+    }
+
+    /**
+     * Retrieve the list of groups assigned to a role in the context of an organization.
+     */
+    public ManagementApiHttpResponse<SyncPagingIterable<RoleGroup>> list(
+            String organizationId, String roleId, ListOrganizationRoleGroupsRequestParameters request) {
+        return list(organizationId, roleId, request, null);
+    }
+
+    /**
+     * Retrieve the list of groups assigned to a role in the context of an organization.
+     */
+    public ManagementApiHttpResponse<SyncPagingIterable<RoleGroup>> list(
+            String organizationId,
+            String roleId,
+            ListOrganizationRoleGroupsRequestParameters request,
+            RequestOptions requestOptions) {
+        HttpUrl.Builder httpUrl = HttpUrl.parse(this.clientOptions.environment().getUrl())
+                .newBuilder()
+                .addPathSegments("organizations")
+                .addPathSegment(organizationId)
+                .addPathSegments("roles")
+                .addPathSegment(roleId)
+                .addPathSegments("groups");
+        if (!request.getFrom().isAbsent()) {
+            QueryStringMapper.addQueryParameter(
+                    httpUrl, "from", request.getFrom().orElse(null), false);
+        }
+        QueryStringMapper.addQueryParameter(httpUrl, "take", request.getTake().orElse(50), false);
+        if (requestOptions != null) {
+            requestOptions.getQueryParameters().forEach((_key, _value) -> {
+                httpUrl.addQueryParameter(_key, _value);
+            });
+        }
+        Request.Builder _requestBuilder = new Request.Builder()
+                .url(httpUrl.build())
+                .method("GET", null)
+                .headers(Headers.of(clientOptions.headers(requestOptions)))
+                .addHeader("Accept", "application/json");
+        Request okhttpRequest = _requestBuilder.build();
+        OkHttpClient client = clientOptions.httpClient();
+        if (requestOptions != null && requestOptions.getTimeout().isPresent()) {
+            client = clientOptions.httpClientWithTimeout(requestOptions);
+        }
+        if (requestOptions != null && requestOptions.getMaxRetries().isPresent()) {
+            okhttpRequest = okhttpRequest
+                    .newBuilder()
+                    .tag(
+                            RetryInterceptor.MaxRetriesOverride.class,
+                            new RetryInterceptor.MaxRetriesOverride(
+                                    requestOptions.getMaxRetries().get()))
+                    .build();
+        }
+        try (Response response = client.newCall(okhttpRequest).execute()) {
+            ResponseBody responseBody = response.body();
+            String responseBodyString = responseBody != null ? responseBody.string() : "{}";
+            if (response.isSuccessful()) {
+                ListOrganizationRoleGroupsResponseContent parsedResponse = ObjectMappers.JSON_MAPPER.readValue(
+                        responseBodyString, ListOrganizationRoleGroupsResponseContent.class);
+                Optional<String> startingAfter = parsedResponse.getNext();
+                ListOrganizationRoleGroupsRequestParameters nextRequest =
+                        ListOrganizationRoleGroupsRequestParameters.builder()
+                                .from(request)
+                                .from(startingAfter)
+                                .build();
+                List<RoleGroup> result = parsedResponse.getGroups();
+                return new ManagementApiHttpResponse<>(
+                        new SyncPagingIterable<RoleGroup>(startingAfter.isPresent(), result, parsedResponse, () -> list(
+                                        organizationId, roleId, nextRequest, requestOptions)
+                                .body()),
+                        response);
+            }
+            try {
+                switch (response.code()) {
+                    case 400:
+                        throw new BadRequestError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 401:
+                        throw new UnauthorizedError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 403:
+                        throw new ForbiddenError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 404:
+                        throw new NotFoundError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                    case 429:
+                        throw new TooManyRequestsError(
+                                ObjectMappers.JSON_MAPPER.readValue(responseBodyString, Object.class), response);
+                }
+            } catch (JsonProcessingException ignored) {
+                // unable to map error response, throwing generic error
+            }
+            Object errorBody = ObjectMappers.parseErrorBody(responseBodyString);
+            throw new ManagementApiException(
+                    "Error with status code " + response.code(), response.code(), errorBody, response);
+        } catch (JsonProcessingException e) {
+            throw new ManagementException("Failed to deserialize response: " + e.getMessage(), e);
+        } catch (IOException e) {
+            throw new ManagementException("Network error executing HTTP request", e);
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/roles/RawMembersClient.java b/src/main/java/com/auth0/client/mgmt/organizations/roles/RawMembersClient.java
index 7d7abc6f..307e4e3a 100644
--- a/src/main/java/com/auth0/client/mgmt/organizations/roles/RawMembersClient.java
+++ b/src/main/java/com/auth0/client/mgmt/organizations/roles/RawMembersClient.java
@@ -40,6 +40,11 @@ public RawMembersClient(ClientOptions clientOptions) {
 
     /**
      * List the organization members assigned a specific role within the context of an organization.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: Returns only members with direct role assignments. For groups assigned to this role within the organization, use <code>GET /api/v2/organizations/{organization_id}/roles/{role_id}/groups</code>.
+     *   </li>
+     * </ul></p>
      */
     public ManagementApiHttpResponse<SyncPagingIterable<RoleMember>> list(String id, String roleId) {
         return list(
@@ -50,6 +55,11 @@ public ManagementApiHttpResponse<SyncPagingIterable<RoleMember>> list(String id,
 
     /**
      * List the organization members assigned a specific role within the context of an organization.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: Returns only members with direct role assignments. For groups assigned to this role within the organization, use <code>GET /api/v2/organizations/{organization_id}/roles/{role_id}/groups</code>.
+     *   </li>
+     * </ul></p>
      */
     public ManagementApiHttpResponse<SyncPagingIterable<RoleMember>> list(
             String id, String roleId, RequestOptions requestOptions) {
@@ -62,6 +72,11 @@ public ManagementApiHttpResponse<SyncPagingIterable<RoleMember>> list(
 
     /**
      * List the organization members assigned a specific role within the context of an organization.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: Returns only members with direct role assignments. For groups assigned to this role within the organization, use <code>GET /api/v2/organizations/{organization_id}/roles/{role_id}/groups</code>.
+     *   </li>
+     * </ul></p>
      */
     public ManagementApiHttpResponse<SyncPagingIterable<RoleMember>> list(
             String id, String roleId, ListOrganizationRoleMembersRequestParameters request) {
@@ -70,6 +85,11 @@ public ManagementApiHttpResponse<SyncPagingIterable<RoleMember>> list(
 
     /**
      * List the organization members assigned a specific role within the context of an organization.
+     * <p><ul>
+     *   <li>
+     *     <b>Note</b>: Returns only members with direct role assignments. For groups assigned to this role within the organization, use <code>GET /api/v2/organizations/{organization_id}/roles/{role_id}/groups</code>.
+     *   </li>
+     * </ul></p>
      */
     public ManagementApiHttpResponse<SyncPagingIterable<RoleMember>> list(
             String id,
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/roles/RolesClient.java b/src/main/java/com/auth0/client/mgmt/organizations/roles/RolesClient.java
index bd4fe8ae..fbd90314 100644
--- a/src/main/java/com/auth0/client/mgmt/organizations/roles/RolesClient.java
+++ b/src/main/java/com/auth0/client/mgmt/organizations/roles/RolesClient.java
@@ -12,12 +12,19 @@ public class RolesClient {
 
     protected final Supplier<MembersClient> membersClient;
 
+    protected final Supplier<GroupsClient> groupsClient;
+
     public RolesClient(ClientOptions clientOptions) {
         this.clientOptions = clientOptions;
         this.membersClient = Suppliers.memoize(() -> new MembersClient(clientOptions));
+        this.groupsClient = Suppliers.memoize(() -> new GroupsClient(clientOptions));
     }
 
     public MembersClient members() {
         return this.membersClient.get();
     }
+
+    public GroupsClient groups() {
+        return this.groupsClient.get();
+    }
 }
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/roles/types/ListOrganizationRoleGroupsRequestParameters.java b/src/main/java/com/auth0/client/mgmt/organizations/roles/types/ListOrganizationRoleGroupsRequestParameters.java
new file mode 100644
index 00000000..7bf48331
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/organizations/roles/types/ListOrganizationRoleGroupsRequestParameters.java
@@ -0,0 +1,204 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.organizations.roles.types;
+
+import com.auth0.client.mgmt.core.NullableNonemptyFilter;
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.core.OptionalNullable;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Optional;
+import org.jetbrains.annotations.Nullable;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = ListOrganizationRoleGroupsRequestParameters.Builder.class)
+public final class ListOrganizationRoleGroupsRequestParameters {
+    private final OptionalNullable<String> from;
+
+    private final OptionalNullable<Integer> take;
+
+    private final Map<String, Object> additionalProperties;
+
+    private ListOrganizationRoleGroupsRequestParameters(
+            OptionalNullable<String> from, OptionalNullable<Integer> take, Map<String, Object> additionalProperties) {
+        this.from = from;
+        this.take = take;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return Optional Id from which to start selection.
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("from")
+    public OptionalNullable<String> getFrom() {
+        if (from == null) {
+            return OptionalNullable.absent();
+        }
+        return from;
+    }
+
+    /**
+     * @return Number of results per page. Defaults to 50.
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("take")
+    public OptionalNullable<Integer> getTake() {
+        if (take == null) {
+            return OptionalNullable.absent();
+        }
+        return take;
+    }
+
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("from")
+    private OptionalNullable<String> _getFrom() {
+        return from;
+    }
+
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("take")
+    private OptionalNullable<Integer> _getTake() {
+        return take;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof ListOrganizationRoleGroupsRequestParameters
+                && equalTo((ListOrganizationRoleGroupsRequestParameters) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(ListOrganizationRoleGroupsRequestParameters other) {
+        return from.equals(other.from) && take.equals(other.take);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.from, this.take);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder {
+        private OptionalNullable<String> from = OptionalNullable.absent();
+
+        private OptionalNullable<Integer> take = OptionalNullable.absent();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        public Builder from(ListOrganizationRoleGroupsRequestParameters other) {
+            from(other.getFrom());
+            take(other.getTake());
+            return this;
+        }
+
+        /**
+         * <p>Optional Id from which to start selection.</p>
+         */
+        @JsonSetter(value = "from", nulls = Nulls.SKIP)
+        public Builder from(@Nullable OptionalNullable<String> from) {
+            this.from = from;
+            return this;
+        }
+
+        public Builder from(String from) {
+            this.from = OptionalNullable.of(from);
+            return this;
+        }
+
+        public Builder from(Optional<String> from) {
+            if (from.isPresent()) {
+                this.from = OptionalNullable.of(from.get());
+            } else {
+                this.from = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder from(com.auth0.client.mgmt.core.Nullable<String> from) {
+            if (from.isNull()) {
+                this.from = OptionalNullable.ofNull();
+            } else if (from.isEmpty()) {
+                this.from = OptionalNullable.absent();
+            } else {
+                this.from = OptionalNullable.of(from.get());
+            }
+            return this;
+        }
+
+        /**
+         * <p>Number of results per page. Defaults to 50.</p>
+         */
+        @JsonSetter(value = "take", nulls = Nulls.SKIP)
+        public Builder take(@Nullable OptionalNullable<Integer> take) {
+            this.take = take;
+            return this;
+        }
+
+        public Builder take(Integer take) {
+            this.take = OptionalNullable.of(take);
+            return this;
+        }
+
+        public Builder take(Optional<Integer> take) {
+            if (take.isPresent()) {
+                this.take = OptionalNullable.of(take.get());
+            } else {
+                this.take = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder take(com.auth0.client.mgmt.core.Nullable<Integer> take) {
+            if (take.isNull()) {
+                this.take = OptionalNullable.ofNull();
+            } else if (take.isEmpty()) {
+                this.take = OptionalNullable.absent();
+            } else {
+                this.take = OptionalNullable.of(take.get());
+            }
+            return this;
+        }
+
+        public ListOrganizationRoleGroupsRequestParameters build() {
+            return new ListOrganizationRoleGroupsRequestParameters(from, take, additionalProperties);
+        }
+
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/types/CreateOrganizationClientsRequestContent.java b/src/main/java/com/auth0/client/mgmt/organizations/types/CreateOrganizationClientsRequestContent.java
new file mode 100644
index 00000000..9126f6bf
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/organizations/types/CreateOrganizationClientsRequestContent.java
@@ -0,0 +1,125 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.organizations.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.types.CreateOrganizationClientRequestItem;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Objects;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = CreateOrganizationClientsRequestContent.Builder.class)
+public final class CreateOrganizationClientsRequestContent {
+    private final List<CreateOrganizationClientRequestItem> clients;
+
+    private final Map<String, Object> additionalProperties;
+
+    private CreateOrganizationClientsRequestContent(
+            List<CreateOrganizationClientRequestItem> clients, Map<String, Object> additionalProperties) {
+        this.clients = clients;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return List of clients to associate with the organization.
+     */
+    @JsonProperty("clients")
+    public List<CreateOrganizationClientRequestItem> getClients() {
+        return clients;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof CreateOrganizationClientsRequestContent
+                && equalTo((CreateOrganizationClientsRequestContent) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(CreateOrganizationClientsRequestContent other) {
+        return clients.equals(other.clients);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.clients);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder {
+        private List<CreateOrganizationClientRequestItem> clients = new ArrayList<>();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        public Builder from(CreateOrganizationClientsRequestContent other) {
+            clients(other.getClients());
+            return this;
+        }
+
+        /**
+         * <p>List of clients to associate with the organization.</p>
+         */
+        @JsonSetter(value = "clients", nulls = Nulls.SKIP)
+        public Builder clients(List<CreateOrganizationClientRequestItem> clients) {
+            this.clients.clear();
+            if (clients != null) {
+                this.clients.addAll(clients);
+            }
+            return this;
+        }
+
+        public Builder addClients(CreateOrganizationClientRequestItem clients) {
+            this.clients.add(clients);
+            return this;
+        }
+
+        public Builder addAllClients(List<CreateOrganizationClientRequestItem> clients) {
+            if (clients != null) {
+                this.clients.addAll(clients);
+            }
+            return this;
+        }
+
+        public CreateOrganizationClientsRequestContent build() {
+            return new CreateOrganizationClientsRequestContent(clients, additionalProperties);
+        }
+
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/types/DeleteOrganizationClientsRequestContent.java b/src/main/java/com/auth0/client/mgmt/organizations/types/DeleteOrganizationClientsRequestContent.java
new file mode 100644
index 00000000..0bfa0ada
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/organizations/types/DeleteOrganizationClientsRequestContent.java
@@ -0,0 +1,123 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.organizations.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Objects;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = DeleteOrganizationClientsRequestContent.Builder.class)
+public final class DeleteOrganizationClientsRequestContent {
+    private final List<String> clients;
+
+    private final Map<String, Object> additionalProperties;
+
+    private DeleteOrganizationClientsRequestContent(List<String> clients, Map<String, Object> additionalProperties) {
+        this.clients = clients;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return List of client IDs to disassociate from the organization.
+     */
+    @JsonProperty("clients")
+    public List<String> getClients() {
+        return clients;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof DeleteOrganizationClientsRequestContent
+                && equalTo((DeleteOrganizationClientsRequestContent) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(DeleteOrganizationClientsRequestContent other) {
+        return clients.equals(other.clients);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.clients);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder {
+        private List<String> clients = new ArrayList<>();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        public Builder from(DeleteOrganizationClientsRequestContent other) {
+            clients(other.getClients());
+            return this;
+        }
+
+        /**
+         * <p>List of client IDs to disassociate from the organization.</p>
+         */
+        @JsonSetter(value = "clients", nulls = Nulls.SKIP)
+        public Builder clients(List<String> clients) {
+            this.clients.clear();
+            if (clients != null) {
+                this.clients.addAll(clients);
+            }
+            return this;
+        }
+
+        public Builder addClients(String clients) {
+            this.clients.add(clients);
+            return this;
+        }
+
+        public Builder addAllClients(List<String> clients) {
+            if (clients != null) {
+                this.clients.addAll(clients);
+            }
+            return this;
+        }
+
+        public DeleteOrganizationClientsRequestContent build() {
+            return new DeleteOrganizationClientsRequestContent(clients, additionalProperties);
+        }
+
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/types/ListOrganizationClientsRequestParameters.java b/src/main/java/com/auth0/client/mgmt/organizations/types/ListOrganizationClientsRequestParameters.java
new file mode 100644
index 00000000..bfa4dbe6
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/organizations/types/ListOrganizationClientsRequestParameters.java
@@ -0,0 +1,204 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.organizations.types;
+
+import com.auth0.client.mgmt.core.NullableNonemptyFilter;
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.core.OptionalNullable;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Optional;
+import org.jetbrains.annotations.Nullable;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = ListOrganizationClientsRequestParameters.Builder.class)
+public final class ListOrganizationClientsRequestParameters {
+    private final OptionalNullable<String> from;
+
+    private final OptionalNullable<Integer> take;
+
+    private final Map<String, Object> additionalProperties;
+
+    private ListOrganizationClientsRequestParameters(
+            OptionalNullable<String> from, OptionalNullable<Integer> take, Map<String, Object> additionalProperties) {
+        this.from = from;
+        this.take = take;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return Optional Id from which to start selection.
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("from")
+    public OptionalNullable<String> getFrom() {
+        if (from == null) {
+            return OptionalNullable.absent();
+        }
+        return from;
+    }
+
+    /**
+     * @return Number of results per page. Defaults to 50. Values greater than the maximum of 100 are capped at 100.
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("take")
+    public OptionalNullable<Integer> getTake() {
+        if (take == null) {
+            return OptionalNullable.absent();
+        }
+        return take;
+    }
+
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("from")
+    private OptionalNullable<String> _getFrom() {
+        return from;
+    }
+
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("take")
+    private OptionalNullable<Integer> _getTake() {
+        return take;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof ListOrganizationClientsRequestParameters
+                && equalTo((ListOrganizationClientsRequestParameters) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(ListOrganizationClientsRequestParameters other) {
+        return from.equals(other.from) && take.equals(other.take);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.from, this.take);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder {
+        private OptionalNullable<String> from = OptionalNullable.absent();
+
+        private OptionalNullable<Integer> take = OptionalNullable.absent();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        public Builder from(ListOrganizationClientsRequestParameters other) {
+            from(other.getFrom());
+            take(other.getTake());
+            return this;
+        }
+
+        /**
+         * <p>Optional Id from which to start selection.</p>
+         */
+        @JsonSetter(value = "from", nulls = Nulls.SKIP)
+        public Builder from(@Nullable OptionalNullable<String> from) {
+            this.from = from;
+            return this;
+        }
+
+        public Builder from(String from) {
+            this.from = OptionalNullable.of(from);
+            return this;
+        }
+
+        public Builder from(Optional<String> from) {
+            if (from.isPresent()) {
+                this.from = OptionalNullable.of(from.get());
+            } else {
+                this.from = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder from(com.auth0.client.mgmt.core.Nullable<String> from) {
+            if (from.isNull()) {
+                this.from = OptionalNullable.ofNull();
+            } else if (from.isEmpty()) {
+                this.from = OptionalNullable.absent();
+            } else {
+                this.from = OptionalNullable.of(from.get());
+            }
+            return this;
+        }
+
+        /**
+         * <p>Number of results per page. Defaults to 50. Values greater than the maximum of 100 are capped at 100.</p>
+         */
+        @JsonSetter(value = "take", nulls = Nulls.SKIP)
+        public Builder take(@Nullable OptionalNullable<Integer> take) {
+            this.take = take;
+            return this;
+        }
+
+        public Builder take(Integer take) {
+            this.take = OptionalNullable.of(take);
+            return this;
+        }
+
+        public Builder take(Optional<Integer> take) {
+            if (take.isPresent()) {
+                this.take = OptionalNullable.of(take.get());
+            } else {
+                this.take = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder take(com.auth0.client.mgmt.core.Nullable<Integer> take) {
+            if (take.isNull()) {
+                this.take = OptionalNullable.ofNull();
+            } else if (take.isEmpty()) {
+                this.take = OptionalNullable.absent();
+            } else {
+                this.take = OptionalNullable.of(take.get());
+            }
+            return this;
+        }
+
+        public ListOrganizationClientsRequestParameters build() {
+            return new ListOrganizationClientsRequestParameters(from, take, additionalProperties);
+        }
+
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/types/ListOrganizationMembersRequestParameters.java b/src/main/java/com/auth0/client/mgmt/organizations/types/ListOrganizationMembersRequestParameters.java
index 88eb0abb..0f1a7f38 100644
--- a/src/main/java/com/auth0/client/mgmt/organizations/types/ListOrganizationMembersRequestParameters.java
+++ b/src/main/java/com/auth0/client/mgmt/organizations/types/ListOrganizationMembersRequestParameters.java
@@ -23,6 +23,8 @@
 @JsonInclude(JsonInclude.Include.NON_ABSENT)
 @JsonDeserialize(builder = ListOrganizationMembersRequestParameters.Builder.class)
 public final class ListOrganizationMembersRequestParameters {
+    private final OptionalNullable<Boolean> includeTotals;
+
     private final OptionalNullable<String> from;
 
     private final OptionalNullable<Integer> take;
@@ -34,11 +36,13 @@ public final class ListOrganizationMembersRequestParameters {
     private final Map<String, Object> additionalProperties;
 
     private ListOrganizationMembersRequestParameters(
+            OptionalNullable<Boolean> includeTotals,
             OptionalNullable<String> from,
             OptionalNullable<Integer> take,
             OptionalNullable<String> fields,
             OptionalNullable<Boolean> includeFields,
             Map<String, Object> additionalProperties) {
+        this.includeTotals = includeTotals;
         this.from = from;
         this.take = take;
         this.fields = fields;
@@ -46,6 +50,18 @@ private ListOrganizationMembersRequestParameters(
         this.additionalProperties = additionalProperties;
     }
 
+    /**
+     * @return Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    public OptionalNullable<Boolean> getIncludeTotals() {
+        if (includeTotals == null) {
+            return OptionalNullable.absent();
+        }
+        return includeTotals;
+    }
+
     /**
      * @return Optional Id from which to start selection.
      */
@@ -94,6 +110,12 @@ public OptionalNullable<Boolean> getIncludeFields() {
         return includeFields;
     }
 
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    private OptionalNullable<Boolean> _getIncludeTotals() {
+        return includeTotals;
+    }
+
     @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
     @JsonProperty("from")
     private OptionalNullable<String> _getFrom() {
@@ -131,7 +153,8 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(ListOrganizationMembersRequestParameters other) {
-        return from.equals(other.from)
+        return includeTotals.equals(other.includeTotals)
+                && from.equals(other.from)
                 && take.equals(other.take)
                 && fields.equals(other.fields)
                 && includeFields.equals(other.includeFields);
@@ -139,7 +162,7 @@ private boolean equalTo(ListOrganizationMembersRequestParameters other) {
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.from, this.take, this.fields, this.includeFields);
+        return Objects.hash(this.includeTotals, this.from, this.take, this.fields, this.includeFields);
     }
 
     @java.lang.Override
@@ -153,6 +176,8 @@ public static Builder builder() {
 
     @JsonIgnoreProperties(ignoreUnknown = true)
     public static final class Builder {
+        private OptionalNullable<Boolean> includeTotals = OptionalNullable.absent();
+
         private OptionalNullable<String> from = OptionalNullable.absent();
 
         private OptionalNullable<Integer> take = OptionalNullable.absent();
@@ -167,6 +192,7 @@ public static final class Builder {
         private Builder() {}
 
         public Builder from(ListOrganizationMembersRequestParameters other) {
+            includeTotals(other.getIncludeTotals());
             from(other.getFrom());
             take(other.getTake());
             fields(other.getFields());
@@ -174,6 +200,40 @@ public Builder from(ListOrganizationMembersRequestParameters other) {
             return this;
         }
 
+        /**
+         * <p>Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).</p>
+         */
+        @JsonSetter(value = "include_totals", nulls = Nulls.SKIP)
+        public Builder includeTotals(@Nullable OptionalNullable<Boolean> includeTotals) {
+            this.includeTotals = includeTotals;
+            return this;
+        }
+
+        public Builder includeTotals(Boolean includeTotals) {
+            this.includeTotals = OptionalNullable.of(includeTotals);
+            return this;
+        }
+
+        public Builder includeTotals(Optional<Boolean> includeTotals) {
+            if (includeTotals.isPresent()) {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            } else {
+                this.includeTotals = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder includeTotals(com.auth0.client.mgmt.core.Nullable<Boolean> includeTotals) {
+            if (includeTotals.isNull()) {
+                this.includeTotals = OptionalNullable.ofNull();
+            } else if (includeTotals.isEmpty()) {
+                this.includeTotals = OptionalNullable.absent();
+            } else {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            }
+            return this;
+        }
+
         /**
          * <p>Optional Id from which to start selection.</p>
          */
@@ -312,7 +372,7 @@ public Builder includeFields(com.auth0.client.mgmt.core.Nullable<Boolean> includ
 
         public ListOrganizationMembersRequestParameters build() {
             return new ListOrganizationMembersRequestParameters(
-                    from, take, fields, includeFields, additionalProperties);
+                    includeTotals, from, take, fields, includeFields, additionalProperties);
         }
 
         public Builder additionalProperty(String key, Object value) {
diff --git a/src/main/java/com/auth0/client/mgmt/organizations/types/UpdateOrganizationClientRequestContent.java b/src/main/java/com/auth0/client/mgmt/organizations/types/UpdateOrganizationClientRequestContent.java
new file mode 100644
index 00000000..0b5bc760
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/organizations/types/UpdateOrganizationClientRequestContent.java
@@ -0,0 +1,113 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.organizations.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Optional;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = UpdateOrganizationClientRequestContent.Builder.class)
+public final class UpdateOrganizationClientRequestContent {
+    private final Optional<Boolean> useForMemberAccess;
+
+    private final Map<String, Object> additionalProperties;
+
+    private UpdateOrganizationClientRequestContent(
+            Optional<Boolean> useForMemberAccess, Map<String, Object> additionalProperties) {
+        this.useForMemberAccess = useForMemberAccess;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return Whether this client is used for member access to the organization.
+     */
+    @JsonProperty("use_for_member_access")
+    public Optional<Boolean> getUseForMemberAccess() {
+        return useForMemberAccess;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof UpdateOrganizationClientRequestContent
+                && equalTo((UpdateOrganizationClientRequestContent) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(UpdateOrganizationClientRequestContent other) {
+        return useForMemberAccess.equals(other.useForMemberAccess);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.useForMemberAccess);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder {
+        private Optional<Boolean> useForMemberAccess = Optional.empty();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        public Builder from(UpdateOrganizationClientRequestContent other) {
+            useForMemberAccess(other.getUseForMemberAccess());
+            return this;
+        }
+
+        /**
+         * <p>Whether this client is used for member access to the organization.</p>
+         */
+        @JsonSetter(value = "use_for_member_access", nulls = Nulls.SKIP)
+        public Builder useForMemberAccess(Optional<Boolean> useForMemberAccess) {
+            this.useForMemberAccess = useForMemberAccess;
+            return this;
+        }
+
+        public Builder useForMemberAccess(Boolean useForMemberAccess) {
+            this.useForMemberAccess = Optional.ofNullable(useForMemberAccess);
+            return this;
+        }
+
+        public UpdateOrganizationClientRequestContent build() {
+            return new UpdateOrganizationClientRequestContent(useForMemberAccess, additionalProperties);
+        }
+
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/roles/AsyncRawUsersClient.java b/src/main/java/com/auth0/client/mgmt/roles/AsyncRawUsersClient.java
index e0dec306..f424e244 100644
--- a/src/main/java/com/auth0/client/mgmt/roles/AsyncRawUsersClient.java
+++ b/src/main/java/com/auth0/client/mgmt/roles/AsyncRawUsersClient.java
@@ -49,6 +49,7 @@ public AsyncRawUsersClient(ClientOptions clientOptions) {
 
     /**
      * Retrieve list of users associated with a specific role. For Dashboard instructions, review <a href="https://auth0.com/docs/manage-users/access-control/configure-core-rbac/roles/view-users-assigned-to-roles">View Users Assigned to Roles</a>.
+     * <p><strong>Note</strong>: Returns only users with direct role assignments. For groups assigned to this role, use <code>GET /api/v2/roles/{id}/groups</code>.</p>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
      * <li>Offset pagination</li>
@@ -69,6 +70,7 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<RoleUser>>
 
     /**
      * Retrieve list of users associated with a specific role. For Dashboard instructions, review <a href="https://auth0.com/docs/manage-users/access-control/configure-core-rbac/roles/view-users-assigned-to-roles">View Users Assigned to Roles</a>.
+     * <p><strong>Note</strong>: Returns only users with direct role assignments. For groups assigned to this role, use <code>GET /api/v2/roles/{id}/groups</code>.</p>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
      * <li>Offset pagination</li>
@@ -90,6 +92,7 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<RoleUser>>
 
     /**
      * Retrieve list of users associated with a specific role. For Dashboard instructions, review <a href="https://auth0.com/docs/manage-users/access-control/configure-core-rbac/roles/view-users-assigned-to-roles">View Users Assigned to Roles</a>.
+     * <p><strong>Note</strong>: Returns only users with direct role assignments. For groups assigned to this role, use <code>GET /api/v2/roles/{id}/groups</code>.</p>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
      * <li>Offset pagination</li>
@@ -111,6 +114,7 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<RoleUser>>
 
     /**
      * Retrieve list of users associated with a specific role. For Dashboard instructions, review <a href="https://auth0.com/docs/manage-users/access-control/configure-core-rbac/roles/view-users-assigned-to-roles">View Users Assigned to Roles</a>.
+     * <p><strong>Note</strong>: Returns only users with direct role assignments. For groups assigned to this role, use <code>GET /api/v2/roles/{id}/groups</code>.</p>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
      * <li>Offset pagination</li>
@@ -132,6 +136,8 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<RoleUser>>
                 .addPathSegments("roles")
                 .addPathSegment(id)
                 .addPathSegments("users");
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/roles/AsyncUsersClient.java b/src/main/java/com/auth0/client/mgmt/roles/AsyncUsersClient.java
index 39bda944..eba9d84e 100644
--- a/src/main/java/com/auth0/client/mgmt/roles/AsyncUsersClient.java
+++ b/src/main/java/com/auth0/client/mgmt/roles/AsyncUsersClient.java
@@ -30,6 +30,7 @@ public AsyncRawUsersClient withRawResponse() {
 
     /**
      * Retrieve list of users associated with a specific role. For Dashboard instructions, review <a href="https://auth0.com/docs/manage-users/access-control/configure-core-rbac/roles/view-users-assigned-to-roles">View Users Assigned to Roles</a>.
+     * <p><strong>Note</strong>: Returns only users with direct role assignments. For groups assigned to this role, use <code>GET /api/v2/roles/{id}/groups</code>.</p>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
      * <li>Offset pagination</li>
@@ -50,6 +51,7 @@ public CompletableFuture<SyncPagingIterable<RoleUser>> list(String id) {
 
     /**
      * Retrieve list of users associated with a specific role. For Dashboard instructions, review <a href="https://auth0.com/docs/manage-users/access-control/configure-core-rbac/roles/view-users-assigned-to-roles">View Users Assigned to Roles</a>.
+     * <p><strong>Note</strong>: Returns only users with direct role assignments. For groups assigned to this role, use <code>GET /api/v2/roles/{id}/groups</code>.</p>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
      * <li>Offset pagination</li>
@@ -70,6 +72,7 @@ public CompletableFuture<SyncPagingIterable<RoleUser>> list(String id, RequestOp
 
     /**
      * Retrieve list of users associated with a specific role. For Dashboard instructions, review <a href="https://auth0.com/docs/manage-users/access-control/configure-core-rbac/roles/view-users-assigned-to-roles">View Users Assigned to Roles</a>.
+     * <p><strong>Note</strong>: Returns only users with direct role assignments. For groups assigned to this role, use <code>GET /api/v2/roles/{id}/groups</code>.</p>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
      * <li>Offset pagination</li>
@@ -90,6 +93,7 @@ public CompletableFuture<SyncPagingIterable<RoleUser>> list(String id, ListRoleU
 
     /**
      * Retrieve list of users associated with a specific role. For Dashboard instructions, review <a href="https://auth0.com/docs/manage-users/access-control/configure-core-rbac/roles/view-users-assigned-to-roles">View Users Assigned to Roles</a>.
+     * <p><strong>Note</strong>: Returns only users with direct role assignments. For groups assigned to this role, use <code>GET /api/v2/roles/{id}/groups</code>.</p>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
      * <li>Offset pagination</li>
diff --git a/src/main/java/com/auth0/client/mgmt/roles/RawUsersClient.java b/src/main/java/com/auth0/client/mgmt/roles/RawUsersClient.java
index fa17f41a..5f4b2134 100644
--- a/src/main/java/com/auth0/client/mgmt/roles/RawUsersClient.java
+++ b/src/main/java/com/auth0/client/mgmt/roles/RawUsersClient.java
@@ -44,6 +44,7 @@ public RawUsersClient(ClientOptions clientOptions) {
 
     /**
      * Retrieve list of users associated with a specific role. For Dashboard instructions, review <a href="https://auth0.com/docs/manage-users/access-control/configure-core-rbac/roles/view-users-assigned-to-roles">View Users Assigned to Roles</a>.
+     * <p><strong>Note</strong>: Returns only users with direct role assignments. For groups assigned to this role, use <code>GET /api/v2/roles/{id}/groups</code>.</p>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
      * <li>Offset pagination</li>
@@ -64,6 +65,7 @@ public ManagementApiHttpResponse<SyncPagingIterable<RoleUser>> list(String id) {
 
     /**
      * Retrieve list of users associated with a specific role. For Dashboard instructions, review <a href="https://auth0.com/docs/manage-users/access-control/configure-core-rbac/roles/view-users-assigned-to-roles">View Users Assigned to Roles</a>.
+     * <p><strong>Note</strong>: Returns only users with direct role assignments. For groups assigned to this role, use <code>GET /api/v2/roles/{id}/groups</code>.</p>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
      * <li>Offset pagination</li>
@@ -84,6 +86,7 @@ public ManagementApiHttpResponse<SyncPagingIterable<RoleUser>> list(String id, R
 
     /**
      * Retrieve list of users associated with a specific role. For Dashboard instructions, review <a href="https://auth0.com/docs/manage-users/access-control/configure-core-rbac/roles/view-users-assigned-to-roles">View Users Assigned to Roles</a>.
+     * <p><strong>Note</strong>: Returns only users with direct role assignments. For groups assigned to this role, use <code>GET /api/v2/roles/{id}/groups</code>.</p>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
      * <li>Offset pagination</li>
@@ -105,6 +108,7 @@ public ManagementApiHttpResponse<SyncPagingIterable<RoleUser>> list(
 
     /**
      * Retrieve list of users associated with a specific role. For Dashboard instructions, review <a href="https://auth0.com/docs/manage-users/access-control/configure-core-rbac/roles/view-users-assigned-to-roles">View Users Assigned to Roles</a>.
+     * <p><strong>Note</strong>: Returns only users with direct role assignments. For groups assigned to this role, use <code>GET /api/v2/roles/{id}/groups</code>.</p>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
      * <li>Offset pagination</li>
@@ -126,6 +130,8 @@ public ManagementApiHttpResponse<SyncPagingIterable<RoleUser>> list(
                 .addPathSegments("roles")
                 .addPathSegment(id)
                 .addPathSegments("users");
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/roles/UsersClient.java b/src/main/java/com/auth0/client/mgmt/roles/UsersClient.java
index a9247945..96fc5e27 100644
--- a/src/main/java/com/auth0/client/mgmt/roles/UsersClient.java
+++ b/src/main/java/com/auth0/client/mgmt/roles/UsersClient.java
@@ -29,6 +29,7 @@ public RawUsersClient withRawResponse() {
 
     /**
      * Retrieve list of users associated with a specific role. For Dashboard instructions, review <a href="https://auth0.com/docs/manage-users/access-control/configure-core-rbac/roles/view-users-assigned-to-roles">View Users Assigned to Roles</a>.
+     * <p><strong>Note</strong>: Returns only users with direct role assignments. For groups assigned to this role, use <code>GET /api/v2/roles/{id}/groups</code>.</p>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
      * <li>Offset pagination</li>
@@ -49,6 +50,7 @@ public SyncPagingIterable<RoleUser> list(String id) {
 
     /**
      * Retrieve list of users associated with a specific role. For Dashboard instructions, review <a href="https://auth0.com/docs/manage-users/access-control/configure-core-rbac/roles/view-users-assigned-to-roles">View Users Assigned to Roles</a>.
+     * <p><strong>Note</strong>: Returns only users with direct role assignments. For groups assigned to this role, use <code>GET /api/v2/roles/{id}/groups</code>.</p>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
      * <li>Offset pagination</li>
@@ -69,6 +71,7 @@ public SyncPagingIterable<RoleUser> list(String id, RequestOptions requestOption
 
     /**
      * Retrieve list of users associated with a specific role. For Dashboard instructions, review <a href="https://auth0.com/docs/manage-users/access-control/configure-core-rbac/roles/view-users-assigned-to-roles">View Users Assigned to Roles</a>.
+     * <p><strong>Note</strong>: Returns only users with direct role assignments. For groups assigned to this role, use <code>GET /api/v2/roles/{id}/groups</code>.</p>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
      * <li>Offset pagination</li>
@@ -89,6 +92,7 @@ public SyncPagingIterable<RoleUser> list(String id, ListRoleUsersRequestParamete
 
     /**
      * Retrieve list of users associated with a specific role. For Dashboard instructions, review <a href="https://auth0.com/docs/manage-users/access-control/configure-core-rbac/roles/view-users-assigned-to-roles">View Users Assigned to Roles</a>.
+     * <p><strong>Note</strong>: Returns only users with direct role assignments. For groups assigned to this role, use <code>GET /api/v2/roles/{id}/groups</code>.</p>
      * <p>This endpoint supports two types of pagination:</p>
      * <ul>
      * <li>Offset pagination</li>
diff --git a/src/main/java/com/auth0/client/mgmt/roles/types/ListRoleUsersRequestParameters.java b/src/main/java/com/auth0/client/mgmt/roles/types/ListRoleUsersRequestParameters.java
index d24737e8..247da19e 100644
--- a/src/main/java/com/auth0/client/mgmt/roles/types/ListRoleUsersRequestParameters.java
+++ b/src/main/java/com/auth0/client/mgmt/roles/types/ListRoleUsersRequestParameters.java
@@ -23,6 +23,8 @@
 @JsonInclude(JsonInclude.Include.NON_ABSENT)
 @JsonDeserialize(builder = ListRoleUsersRequestParameters.Builder.class)
 public final class ListRoleUsersRequestParameters {
+    private final OptionalNullable<Boolean> includeTotals;
+
     private final OptionalNullable<String> from;
 
     private final OptionalNullable<Integer> take;
@@ -30,12 +32,28 @@ public final class ListRoleUsersRequestParameters {
     private final Map<String, Object> additionalProperties;
 
     private ListRoleUsersRequestParameters(
-            OptionalNullable<String> from, OptionalNullable<Integer> take, Map<String, Object> additionalProperties) {
+            OptionalNullable<Boolean> includeTotals,
+            OptionalNullable<String> from,
+            OptionalNullable<Integer> take,
+            Map<String, Object> additionalProperties) {
+        this.includeTotals = includeTotals;
         this.from = from;
         this.take = take;
         this.additionalProperties = additionalProperties;
     }
 
+    /**
+     * @return Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    public OptionalNullable<Boolean> getIncludeTotals() {
+        if (includeTotals == null) {
+            return OptionalNullable.absent();
+        }
+        return includeTotals;
+    }
+
     /**
      * @return Optional Id from which to start selection.
      */
@@ -60,6 +78,12 @@ public OptionalNullable<Integer> getTake() {
         return take;
     }
 
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    private OptionalNullable<Boolean> _getIncludeTotals() {
+        return includeTotals;
+    }
+
     @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
     @JsonProperty("from")
     private OptionalNullable<String> _getFrom() {
@@ -84,12 +108,12 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(ListRoleUsersRequestParameters other) {
-        return from.equals(other.from) && take.equals(other.take);
+        return includeTotals.equals(other.includeTotals) && from.equals(other.from) && take.equals(other.take);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.from, this.take);
+        return Objects.hash(this.includeTotals, this.from, this.take);
     }
 
     @java.lang.Override
@@ -103,6 +127,8 @@ public static Builder builder() {
 
     @JsonIgnoreProperties(ignoreUnknown = true)
     public static final class Builder {
+        private OptionalNullable<Boolean> includeTotals = OptionalNullable.absent();
+
         private OptionalNullable<String> from = OptionalNullable.absent();
 
         private OptionalNullable<Integer> take = OptionalNullable.absent();
@@ -113,11 +139,46 @@ public static final class Builder {
         private Builder() {}
 
         public Builder from(ListRoleUsersRequestParameters other) {
+            includeTotals(other.getIncludeTotals());
             from(other.getFrom());
             take(other.getTake());
             return this;
         }
 
+        /**
+         * <p>Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).</p>
+         */
+        @JsonSetter(value = "include_totals", nulls = Nulls.SKIP)
+        public Builder includeTotals(@Nullable OptionalNullable<Boolean> includeTotals) {
+            this.includeTotals = includeTotals;
+            return this;
+        }
+
+        public Builder includeTotals(Boolean includeTotals) {
+            this.includeTotals = OptionalNullable.of(includeTotals);
+            return this;
+        }
+
+        public Builder includeTotals(Optional<Boolean> includeTotals) {
+            if (includeTotals.isPresent()) {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            } else {
+                this.includeTotals = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder includeTotals(com.auth0.client.mgmt.core.Nullable<Boolean> includeTotals) {
+            if (includeTotals.isNull()) {
+                this.includeTotals = OptionalNullable.ofNull();
+            } else if (includeTotals.isEmpty()) {
+                this.includeTotals = OptionalNullable.absent();
+            } else {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            }
+            return this;
+        }
+
         /**
          * <p>Optional Id from which to start selection.</p>
          */
@@ -187,7 +248,7 @@ public Builder take(com.auth0.client.mgmt.core.Nullable<Integer> take) {
         }
 
         public ListRoleUsersRequestParameters build() {
-            return new ListRoleUsersRequestParameters(from, take, additionalProperties);
+            return new ListRoleUsersRequestParameters(includeTotals, from, take, additionalProperties);
         }
 
         public Builder additionalProperty(String key, Object value) {
diff --git a/src/main/java/com/auth0/client/mgmt/types/AculContextEnum.java b/src/main/java/com/auth0/client/mgmt/types/AculContextEnum.java
index ce1f1484..c584c48f 100644
--- a/src/main/java/com/auth0/client/mgmt/types/AculContextEnum.java
+++ b/src/main/java/com/auth0/client/mgmt/types/AculContextEnum.java
@@ -10,6 +10,8 @@ public final class AculContextEnum {
     public static final AculContextEnum UNTRUSTED_DATA_AUTHORIZATION_PARAMS_UI_LOCALES = new AculContextEnum(
             Value.UNTRUSTED_DATA_AUTHORIZATION_PARAMS_UI_LOCALES, "untrusted_data.authorization_params.ui_locales");
 
+    public static final AculContextEnum COUNTRY_CODES = new AculContextEnum(Value.COUNTRY_CODES, "country_codes");
+
     public static final AculContextEnum UNTRUSTED_DATA_AUTHORIZATION_PARAMS_SCREEN_HINT = new AculContextEnum(
             Value.UNTRUSTED_DATA_AUTHORIZATION_PARAMS_SCREEN_HINT, "untrusted_data.authorization_params.screen_hint");
 
@@ -90,6 +92,8 @@ public <T> T visit(Visitor<T> visitor) {
         switch (value) {
             case UNTRUSTED_DATA_AUTHORIZATION_PARAMS_UI_LOCALES:
                 return visitor.visitUntrustedDataAuthorizationParamsUiLocales();
+            case COUNTRY_CODES:
+                return visitor.visitCountryCodes();
             case UNTRUSTED_DATA_AUTHORIZATION_PARAMS_SCREEN_HINT:
                 return visitor.visitUntrustedDataAuthorizationParamsScreenHint();
             case TENANT_FRIENDLY_NAME:
@@ -135,6 +139,8 @@ public static AculContextEnum valueOf(String value) {
         switch (value) {
             case "untrusted_data.authorization_params.ui_locales":
                 return UNTRUSTED_DATA_AUTHORIZATION_PARAMS_UI_LOCALES;
+            case "country_codes":
+                return COUNTRY_CODES;
             case "untrusted_data.authorization_params.screen_hint":
                 return UNTRUSTED_DATA_AUTHORIZATION_PARAMS_SCREEN_HINT;
             case "tenant.friendly_name":
@@ -179,6 +185,8 @@ public enum Value {
 
         BRANDING_THEMES_DEFAULT,
 
+        COUNTRY_CODES,
+
         CLIENT_LOGO_URI,
 
         CLIENT_DESCRIPTION,
@@ -219,6 +227,8 @@ public interface Visitor<T> {
 
         T visitBrandingThemesDefault();
 
+        T visitCountryCodes();
+
         T visitClientLogoUri();
 
         T visitClientDescription();
diff --git a/src/main/java/com/auth0/client/mgmt/types/AgentResponseContent.java b/src/main/java/com/auth0/client/mgmt/types/AgentResponseContent.java
new file mode 100644
index 00000000..cfc17b35
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/AgentResponseContent.java
@@ -0,0 +1,324 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.time.OffsetDateTime;
+import java.util.HashMap;
+import java.util.LinkedHashMap;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Optional;
+import org.jetbrains.annotations.NotNull;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = AgentResponseContent.Builder.class)
+public final class AgentResponseContent {
+    private final String agentId;
+
+    private final String name;
+
+    private final OffsetDateTime createdAt;
+
+    private final OffsetDateTime updatedAt;
+
+    private final Optional<String> externalAgentId;
+
+    private final Map<String, Object> metadata;
+
+    private final Map<String, Object> additionalProperties;
+
+    private AgentResponseContent(
+            String agentId,
+            String name,
+            OffsetDateTime createdAt,
+            OffsetDateTime updatedAt,
+            Optional<String> externalAgentId,
+            Map<String, Object> metadata,
+            Map<String, Object> additionalProperties) {
+        this.agentId = agentId;
+        this.name = name;
+        this.createdAt = createdAt;
+        this.updatedAt = updatedAt;
+        this.externalAgentId = externalAgentId;
+        this.metadata = metadata;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return The agent ID
+     */
+    @JsonProperty("agent_id")
+    public String getAgentId() {
+        return agentId;
+    }
+
+    /**
+     * @return The agent name
+     */
+    @JsonProperty("name")
+    public String getName() {
+        return name;
+    }
+
+    /**
+     * @return When the agent was created
+     */
+    @JsonProperty("created_at")
+    public OffsetDateTime getCreatedAt() {
+        return createdAt;
+    }
+
+    /**
+     * @return When the agent was last updated
+     */
+    @JsonProperty("updated_at")
+    public OffsetDateTime getUpdatedAt() {
+        return updatedAt;
+    }
+
+    /**
+     * @return External identifier for the agent, if set. Omitted when not set.
+     */
+    @JsonProperty("external_agent_id")
+    public Optional<String> getExternalAgentId() {
+        return externalAgentId;
+    }
+
+    @JsonProperty("metadata")
+    public Map<String, Object> getMetadata() {
+        return metadata;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof AgentResponseContent && equalTo((AgentResponseContent) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(AgentResponseContent other) {
+        return agentId.equals(other.agentId)
+                && name.equals(other.name)
+                && createdAt.equals(other.createdAt)
+                && updatedAt.equals(other.updatedAt)
+                && externalAgentId.equals(other.externalAgentId)
+                && metadata.equals(other.metadata);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(
+                this.agentId, this.name, this.createdAt, this.updatedAt, this.externalAgentId, this.metadata);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static AgentIdStage builder() {
+        return new Builder();
+    }
+
+    public interface AgentIdStage {
+        /**
+         * <p>The agent ID</p>
+         */
+        NameStage agentId(@NotNull String agentId);
+
+        Builder from(AgentResponseContent other);
+    }
+
+    public interface NameStage {
+        /**
+         * <p>The agent name</p>
+         */
+        CreatedAtStage name(@NotNull String name);
+    }
+
+    public interface CreatedAtStage {
+        /**
+         * <p>When the agent was created</p>
+         */
+        UpdatedAtStage createdAt(@NotNull OffsetDateTime createdAt);
+    }
+
+    public interface UpdatedAtStage {
+        /**
+         * <p>When the agent was last updated</p>
+         */
+        _FinalStage updatedAt(@NotNull OffsetDateTime updatedAt);
+    }
+
+    public interface _FinalStage {
+        AgentResponseContent build();
+
+        _FinalStage additionalProperty(String key, Object value);
+
+        _FinalStage additionalProperties(Map<String, Object> additionalProperties);
+
+        /**
+         * <p>External identifier for the agent, if set. Omitted when not set.</p>
+         */
+        _FinalStage externalAgentId(Optional<String> externalAgentId);
+
+        _FinalStage externalAgentId(String externalAgentId);
+
+        _FinalStage metadata(Map<String, Object> metadata);
+
+        _FinalStage putAllMetadata(Map<String, Object> metadata);
+
+        _FinalStage metadata(String key, Object value);
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder implements AgentIdStage, NameStage, CreatedAtStage, UpdatedAtStage, _FinalStage {
+        private String agentId;
+
+        private String name;
+
+        private OffsetDateTime createdAt;
+
+        private OffsetDateTime updatedAt;
+
+        private Map<String, Object> metadata = new LinkedHashMap<>();
+
+        private Optional<String> externalAgentId = Optional.empty();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        @java.lang.Override
+        public Builder from(AgentResponseContent other) {
+            agentId(other.getAgentId());
+            name(other.getName());
+            createdAt(other.getCreatedAt());
+            updatedAt(other.getUpdatedAt());
+            externalAgentId(other.getExternalAgentId());
+            metadata(other.getMetadata());
+            return this;
+        }
+
+        /**
+         * <p>The agent ID</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        @JsonSetter("agent_id")
+        public NameStage agentId(@NotNull String agentId) {
+            this.agentId = Objects.requireNonNull(agentId, "agentId must not be null");
+            return this;
+        }
+
+        /**
+         * <p>The agent name</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        @JsonSetter("name")
+        public CreatedAtStage name(@NotNull String name) {
+            this.name = Objects.requireNonNull(name, "name must not be null");
+            return this;
+        }
+
+        /**
+         * <p>When the agent was created</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        @JsonSetter("created_at")
+        public UpdatedAtStage createdAt(@NotNull OffsetDateTime createdAt) {
+            this.createdAt = Objects.requireNonNull(createdAt, "createdAt must not be null");
+            return this;
+        }
+
+        /**
+         * <p>When the agent was last updated</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        @JsonSetter("updated_at")
+        public _FinalStage updatedAt(@NotNull OffsetDateTime updatedAt) {
+            this.updatedAt = Objects.requireNonNull(updatedAt, "updatedAt must not be null");
+            return this;
+        }
+
+        @java.lang.Override
+        public _FinalStage metadata(String key, Object value) {
+            this.metadata.put(key, value);
+            return this;
+        }
+
+        @java.lang.Override
+        public _FinalStage putAllMetadata(Map<String, Object> metadata) {
+            if (metadata != null) {
+                this.metadata.putAll(metadata);
+            }
+            return this;
+        }
+
+        @java.lang.Override
+        @JsonSetter(value = "metadata", nulls = Nulls.SKIP)
+        public _FinalStage metadata(Map<String, Object> metadata) {
+            this.metadata.clear();
+            if (metadata != null) {
+                this.metadata.putAll(metadata);
+            }
+            return this;
+        }
+
+        /**
+         * <p>External identifier for the agent, if set. Omitted when not set.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage externalAgentId(String externalAgentId) {
+            this.externalAgentId = Optional.ofNullable(externalAgentId);
+            return this;
+        }
+
+        /**
+         * <p>External identifier for the agent, if set. Omitted when not set.</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "external_agent_id", nulls = Nulls.SKIP)
+        public _FinalStage externalAgentId(Optional<String> externalAgentId) {
+            this.externalAgentId = externalAgentId;
+            return this;
+        }
+
+        @java.lang.Override
+        public AgentResponseContent build() {
+            return new AgentResponseContent(
+                    agentId, name, createdAt, updatedAt, externalAgentId, metadata, additionalProperties);
+        }
+
+        @java.lang.Override
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        @java.lang.Override
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/ConflictSchema.java b/src/main/java/com/auth0/client/mgmt/types/ConflictSchema.java
new file mode 100644
index 00000000..3e7c8229
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/ConflictSchema.java
@@ -0,0 +1,163 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Objects;
+import org.jetbrains.annotations.NotNull;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = ConflictSchema.Builder.class)
+public final class ConflictSchema {
+    private final String message;
+
+    private final String statusCode;
+
+    private final ConflictSchemaError error;
+
+    private final Map<String, Object> additionalProperties;
+
+    private ConflictSchema(
+            String message, String statusCode, ConflictSchemaError error, Map<String, Object> additionalProperties) {
+        this.message = message;
+        this.statusCode = statusCode;
+        this.error = error;
+        this.additionalProperties = additionalProperties;
+    }
+
+    @JsonProperty("message")
+    public String getMessage() {
+        return message;
+    }
+
+    @JsonProperty("statusCode")
+    public String getStatusCode() {
+        return statusCode;
+    }
+
+    @JsonProperty("error")
+    public ConflictSchemaError getError() {
+        return error;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof ConflictSchema && equalTo((ConflictSchema) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(ConflictSchema other) {
+        return message.equals(other.message) && statusCode.equals(other.statusCode) && error.equals(other.error);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.message, this.statusCode, this.error);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static MessageStage builder() {
+        return new Builder();
+    }
+
+    public interface MessageStage {
+        StatusCodeStage message(@NotNull String message);
+
+        Builder from(ConflictSchema other);
+    }
+
+    public interface StatusCodeStage {
+        ErrorStage statusCode(@NotNull String statusCode);
+    }
+
+    public interface ErrorStage {
+        _FinalStage error(@NotNull ConflictSchemaError error);
+    }
+
+    public interface _FinalStage {
+        ConflictSchema build();
+
+        _FinalStage additionalProperty(String key, Object value);
+
+        _FinalStage additionalProperties(Map<String, Object> additionalProperties);
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder implements MessageStage, StatusCodeStage, ErrorStage, _FinalStage {
+        private String message;
+
+        private String statusCode;
+
+        private ConflictSchemaError error;
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        @java.lang.Override
+        public Builder from(ConflictSchema other) {
+            message(other.getMessage());
+            statusCode(other.getStatusCode());
+            error(other.getError());
+            return this;
+        }
+
+        @java.lang.Override
+        @JsonSetter("message")
+        public StatusCodeStage message(@NotNull String message) {
+            this.message = Objects.requireNonNull(message, "message must not be null");
+            return this;
+        }
+
+        @java.lang.Override
+        @JsonSetter("statusCode")
+        public ErrorStage statusCode(@NotNull String statusCode) {
+            this.statusCode = Objects.requireNonNull(statusCode, "statusCode must not be null");
+            return this;
+        }
+
+        @java.lang.Override
+        @JsonSetter("error")
+        public _FinalStage error(@NotNull ConflictSchemaError error) {
+            this.error = Objects.requireNonNull(error, "error must not be null");
+            return this;
+        }
+
+        @java.lang.Override
+        public ConflictSchema build() {
+            return new ConflictSchema(message, statusCode, error, additionalProperties);
+        }
+
+        @java.lang.Override
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        @java.lang.Override
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/ConflictSchemaError.java b/src/main/java/com/auth0/client/mgmt/types/ConflictSchemaError.java
new file mode 100644
index 00000000..f833031f
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/ConflictSchemaError.java
@@ -0,0 +1,73 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.fasterxml.jackson.annotation.JsonCreator;
+import com.fasterxml.jackson.annotation.JsonValue;
+
+public final class ConflictSchemaError {
+    public static final ConflictSchemaError CONFLICT = new ConflictSchemaError(Value.CONFLICT, "Conflict");
+
+    private final Value value;
+
+    private final String string;
+
+    ConflictSchemaError(Value value, String string) {
+        this.value = value;
+        this.string = string;
+    }
+
+    public Value getEnumValue() {
+        return value;
+    }
+
+    @java.lang.Override
+    @JsonValue
+    public String toString() {
+        return this.string;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        return (this == other)
+                || (other instanceof ConflictSchemaError && this.string.equals(((ConflictSchemaError) other).string));
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return this.string.hashCode();
+    }
+
+    public <T> T visit(Visitor<T> visitor) {
+        switch (value) {
+            case CONFLICT:
+                return visitor.visitConflict();
+            case UNKNOWN:
+            default:
+                return visitor.visitUnknown(string);
+        }
+    }
+
+    @JsonCreator(mode = JsonCreator.Mode.DELEGATING)
+    public static ConflictSchemaError valueOf(String value) {
+        switch (value) {
+            case "Conflict":
+                return CONFLICT;
+            default:
+                return new ConflictSchemaError(Value.UNKNOWN, value);
+        }
+    }
+
+    public enum Value {
+        CONFLICT,
+
+        UNKNOWN
+    }
+
+    public interface Visitor<T> {
+        T visitConflict();
+
+        T visitUnknown(String unknownType);
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/ConnectionConnectedAccountsPurpose.java b/src/main/java/com/auth0/client/mgmt/types/ConnectionConnectedAccountsPurpose.java
index f190ba53..795f5450 100644
--- a/src/main/java/com/auth0/client/mgmt/types/ConnectionConnectedAccountsPurpose.java
+++ b/src/main/java/com/auth0/client/mgmt/types/ConnectionConnectedAccountsPurpose.java
@@ -24,12 +24,18 @@ public final class ConnectionConnectedAccountsPurpose {
 
     private final Optional<Boolean> crossAppAccess;
 
+    private final Optional<Boolean> allowMissingUserId;
+
     private final Map<String, Object> additionalProperties;
 
     private ConnectionConnectedAccountsPurpose(
-            boolean active, Optional<Boolean> crossAppAccess, Map<String, Object> additionalProperties) {
+            boolean active,
+            Optional<Boolean> crossAppAccess,
+            Optional<Boolean> allowMissingUserId,
+            Map<String, Object> additionalProperties) {
         this.active = active;
         this.crossAppAccess = crossAppAccess;
+        this.allowMissingUserId = allowMissingUserId;
         this.additionalProperties = additionalProperties;
     }
 
@@ -43,6 +49,14 @@ public Optional<Boolean> getCrossAppAccess() {
         return crossAppAccess;
     }
 
+    /**
+     * @return When true, allows storing a connected account without an upstream identity provider user id. At most one such connected account is allowed per user per connection. Default false preserves the strict behaviour (an upstream user id is required).
+     */
+    @JsonProperty("allow_missing_user_id")
+    public Optional<Boolean> getAllowMissingUserId() {
+        return allowMissingUserId;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -56,12 +70,14 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(ConnectionConnectedAccountsPurpose other) {
-        return active == other.active && crossAppAccess.equals(other.crossAppAccess);
+        return active == other.active
+                && crossAppAccess.equals(other.crossAppAccess)
+                && allowMissingUserId.equals(other.allowMissingUserId);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.active, this.crossAppAccess);
+        return Objects.hash(this.active, this.crossAppAccess, this.allowMissingUserId);
     }
 
     @java.lang.Override
@@ -89,12 +105,21 @@ public interface _FinalStage {
         _FinalStage crossAppAccess(Optional<Boolean> crossAppAccess);
 
         _FinalStage crossAppAccess(Boolean crossAppAccess);
+
+        /**
+         * <p>When true, allows storing a connected account without an upstream identity provider user id. At most one such connected account is allowed per user per connection. Default false preserves the strict behaviour (an upstream user id is required).</p>
+         */
+        _FinalStage allowMissingUserId(Optional<Boolean> allowMissingUserId);
+
+        _FinalStage allowMissingUserId(Boolean allowMissingUserId);
     }
 
     @JsonIgnoreProperties(ignoreUnknown = true)
     public static final class Builder implements ActiveStage, _FinalStage {
         private boolean active;
 
+        private Optional<Boolean> allowMissingUserId = Optional.empty();
+
         private Optional<Boolean> crossAppAccess = Optional.empty();
 
         @JsonAnySetter
@@ -106,6 +131,7 @@ private Builder() {}
         public Builder from(ConnectionConnectedAccountsPurpose other) {
             active(other.getActive());
             crossAppAccess(other.getCrossAppAccess());
+            allowMissingUserId(other.getAllowMissingUserId());
             return this;
         }
 
@@ -116,6 +142,26 @@ public _FinalStage active(boolean active) {
             return this;
         }
 
+        /**
+         * <p>When true, allows storing a connected account without an upstream identity provider user id. At most one such connected account is allowed per user per connection. Default false preserves the strict behaviour (an upstream user id is required).</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage allowMissingUserId(Boolean allowMissingUserId) {
+            this.allowMissingUserId = Optional.ofNullable(allowMissingUserId);
+            return this;
+        }
+
+        /**
+         * <p>When true, allows storing a connected account without an upstream identity provider user id. At most one such connected account is allowed per user per connection. Default false preserves the strict behaviour (an upstream user id is required).</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "allow_missing_user_id", nulls = Nulls.SKIP)
+        public _FinalStage allowMissingUserId(Optional<Boolean> allowMissingUserId) {
+            this.allowMissingUserId = allowMissingUserId;
+            return this;
+        }
+
         @java.lang.Override
         public _FinalStage crossAppAccess(Boolean crossAppAccess) {
             this.crossAppAccess = Optional.ofNullable(crossAppAccess);
@@ -131,7 +177,8 @@ public _FinalStage crossAppAccess(Optional<Boolean> crossAppAccess) {
 
         @java.lang.Override
         public ConnectionConnectedAccountsPurpose build() {
-            return new ConnectionConnectedAccountsPurpose(active, crossAppAccess, additionalProperties);
+            return new ConnectionConnectedAccountsPurpose(
+                    active, crossAppAccess, allowMissingUserId, additionalProperties);
         }
 
         @java.lang.Override
diff --git a/src/main/java/com/auth0/client/mgmt/types/ConnectionConnectedAccountsPurposeXaa.java b/src/main/java/com/auth0/client/mgmt/types/ConnectionConnectedAccountsPurposeXaa.java
index 4227dc2c..659607e2 100644
--- a/src/main/java/com/auth0/client/mgmt/types/ConnectionConnectedAccountsPurposeXaa.java
+++ b/src/main/java/com/auth0/client/mgmt/types/ConnectionConnectedAccountsPurposeXaa.java
@@ -24,12 +24,18 @@ public final class ConnectionConnectedAccountsPurposeXaa {
 
     private final boolean active;
 
+    private final Optional<Boolean> allowMissingUserId;
+
     private final Map<String, Object> additionalProperties;
 
     private ConnectionConnectedAccountsPurposeXaa(
-            Optional<Boolean> crossAppAccess, boolean active, Map<String, Object> additionalProperties) {
+            Optional<Boolean> crossAppAccess,
+            boolean active,
+            Optional<Boolean> allowMissingUserId,
+            Map<String, Object> additionalProperties) {
         this.crossAppAccess = crossAppAccess;
         this.active = active;
+        this.allowMissingUserId = allowMissingUserId;
         this.additionalProperties = additionalProperties;
     }
 
@@ -43,6 +49,14 @@ public boolean getActive() {
         return active;
     }
 
+    /**
+     * @return When true, allows storing a connected account without an upstream identity provider user id. At most one such connected account is allowed per user per connection. Default false preserves the strict behaviour (an upstream user id is required).
+     */
+    @JsonProperty("allow_missing_user_id")
+    public Optional<Boolean> getAllowMissingUserId() {
+        return allowMissingUserId;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -56,12 +70,14 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(ConnectionConnectedAccountsPurposeXaa other) {
-        return crossAppAccess.equals(other.crossAppAccess) && active == other.active;
+        return crossAppAccess.equals(other.crossAppAccess)
+                && active == other.active
+                && allowMissingUserId.equals(other.allowMissingUserId);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.crossAppAccess, this.active);
+        return Objects.hash(this.crossAppAccess, this.active, this.allowMissingUserId);
     }
 
     @java.lang.Override
@@ -89,12 +105,21 @@ public interface _FinalStage {
         _FinalStage crossAppAccess(Optional<Boolean> crossAppAccess);
 
         _FinalStage crossAppAccess(Boolean crossAppAccess);
+
+        /**
+         * <p>When true, allows storing a connected account without an upstream identity provider user id. At most one such connected account is allowed per user per connection. Default false preserves the strict behaviour (an upstream user id is required).</p>
+         */
+        _FinalStage allowMissingUserId(Optional<Boolean> allowMissingUserId);
+
+        _FinalStage allowMissingUserId(Boolean allowMissingUserId);
     }
 
     @JsonIgnoreProperties(ignoreUnknown = true)
     public static final class Builder implements ActiveStage, _FinalStage {
         private boolean active;
 
+        private Optional<Boolean> allowMissingUserId = Optional.empty();
+
         private Optional<Boolean> crossAppAccess = Optional.empty();
 
         @JsonAnySetter
@@ -106,6 +131,7 @@ private Builder() {}
         public Builder from(ConnectionConnectedAccountsPurposeXaa other) {
             crossAppAccess(other.getCrossAppAccess());
             active(other.getActive());
+            allowMissingUserId(other.getAllowMissingUserId());
             return this;
         }
 
@@ -116,6 +142,26 @@ public _FinalStage active(boolean active) {
             return this;
         }
 
+        /**
+         * <p>When true, allows storing a connected account without an upstream identity provider user id. At most one such connected account is allowed per user per connection. Default false preserves the strict behaviour (an upstream user id is required).</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage allowMissingUserId(Boolean allowMissingUserId) {
+            this.allowMissingUserId = Optional.ofNullable(allowMissingUserId);
+            return this;
+        }
+
+        /**
+         * <p>When true, allows storing a connected account without an upstream identity provider user id. At most one such connected account is allowed per user per connection. Default false preserves the strict behaviour (an upstream user id is required).</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "allow_missing_user_id", nulls = Nulls.SKIP)
+        public _FinalStage allowMissingUserId(Optional<Boolean> allowMissingUserId) {
+            this.allowMissingUserId = allowMissingUserId;
+            return this;
+        }
+
         @java.lang.Override
         public _FinalStage crossAppAccess(Boolean crossAppAccess) {
             this.crossAppAccess = Optional.ofNullable(crossAppAccess);
@@ -131,7 +177,8 @@ public _FinalStage crossAppAccess(Optional<Boolean> crossAppAccess) {
 
         @java.lang.Override
         public ConnectionConnectedAccountsPurposeXaa build() {
-            return new ConnectionConnectedAccountsPurposeXaa(crossAppAccess, active, additionalProperties);
+            return new ConnectionConnectedAccountsPurposeXaa(
+                    crossAppAccess, active, allowMissingUserId, additionalProperties);
         }
 
         @java.lang.Override
diff --git a/src/main/java/com/auth0/client/mgmt/types/CreateAgentRequestContent.java b/src/main/java/com/auth0/client/mgmt/types/CreateAgentRequestContent.java
new file mode 100644
index 00000000..bf77f658
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/CreateAgentRequestContent.java
@@ -0,0 +1,248 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Optional;
+import org.jetbrains.annotations.NotNull;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = CreateAgentRequestContent.Builder.class)
+public final class CreateAgentRequestContent {
+    private final String name;
+
+    private final Optional<String> clientId;
+
+    private final Optional<String> externalAgentId;
+
+    private final Optional<Map<String, Object>> metadata;
+
+    private final Map<String, Object> additionalProperties;
+
+    private CreateAgentRequestContent(
+            String name,
+            Optional<String> clientId,
+            Optional<String> externalAgentId,
+            Optional<Map<String, Object>> metadata,
+            Map<String, Object> additionalProperties) {
+        this.name = name;
+        this.clientId = clientId;
+        this.externalAgentId = externalAgentId;
+        this.metadata = metadata;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return The agent name. Cannot contain &lt;, &gt;, or null bytes.
+     */
+    @JsonProperty("name")
+    public String getName() {
+        return name;
+    }
+
+    /**
+     * @return Optional client ID to associate with the agent
+     */
+    @JsonProperty("client_id")
+    public Optional<String> getClientId() {
+        return clientId;
+    }
+
+    /**
+     * @return Optional external identifier for the agent. Immutable after creation. Must be unique within the tenant.
+     */
+    @JsonProperty("external_agent_id")
+    public Optional<String> getExternalAgentId() {
+        return externalAgentId;
+    }
+
+    @JsonProperty("metadata")
+    public Optional<Map<String, Object>> getMetadata() {
+        return metadata;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof CreateAgentRequestContent && equalTo((CreateAgentRequestContent) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(CreateAgentRequestContent other) {
+        return name.equals(other.name)
+                && clientId.equals(other.clientId)
+                && externalAgentId.equals(other.externalAgentId)
+                && metadata.equals(other.metadata);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.name, this.clientId, this.externalAgentId, this.metadata);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static NameStage builder() {
+        return new Builder();
+    }
+
+    public interface NameStage {
+        /**
+         * <p>The agent name. Cannot contain &lt;, &gt;, or null bytes.</p>
+         */
+        _FinalStage name(@NotNull String name);
+
+        Builder from(CreateAgentRequestContent other);
+    }
+
+    public interface _FinalStage {
+        CreateAgentRequestContent build();
+
+        _FinalStage additionalProperty(String key, Object value);
+
+        _FinalStage additionalProperties(Map<String, Object> additionalProperties);
+
+        /**
+         * <p>Optional client ID to associate with the agent</p>
+         */
+        _FinalStage clientId(Optional<String> clientId);
+
+        _FinalStage clientId(String clientId);
+
+        /**
+         * <p>Optional external identifier for the agent. Immutable after creation. Must be unique within the tenant.</p>
+         */
+        _FinalStage externalAgentId(Optional<String> externalAgentId);
+
+        _FinalStage externalAgentId(String externalAgentId);
+
+        _FinalStage metadata(Optional<Map<String, Object>> metadata);
+
+        _FinalStage metadata(Map<String, Object> metadata);
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder implements NameStage, _FinalStage {
+        private String name;
+
+        private Optional<Map<String, Object>> metadata = Optional.empty();
+
+        private Optional<String> externalAgentId = Optional.empty();
+
+        private Optional<String> clientId = Optional.empty();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        @java.lang.Override
+        public Builder from(CreateAgentRequestContent other) {
+            name(other.getName());
+            clientId(other.getClientId());
+            externalAgentId(other.getExternalAgentId());
+            metadata(other.getMetadata());
+            return this;
+        }
+
+        /**
+         * <p>The agent name. Cannot contain &lt;, &gt;, or null bytes.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        @JsonSetter("name")
+        public _FinalStage name(@NotNull String name) {
+            this.name = Objects.requireNonNull(name, "name must not be null");
+            return this;
+        }
+
+        @java.lang.Override
+        public _FinalStage metadata(Map<String, Object> metadata) {
+            this.metadata = Optional.ofNullable(metadata);
+            return this;
+        }
+
+        @java.lang.Override
+        @JsonSetter(value = "metadata", nulls = Nulls.SKIP)
+        public _FinalStage metadata(Optional<Map<String, Object>> metadata) {
+            this.metadata = metadata;
+            return this;
+        }
+
+        /**
+         * <p>Optional external identifier for the agent. Immutable after creation. Must be unique within the tenant.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage externalAgentId(String externalAgentId) {
+            this.externalAgentId = Optional.ofNullable(externalAgentId);
+            return this;
+        }
+
+        /**
+         * <p>Optional external identifier for the agent. Immutable after creation. Must be unique within the tenant.</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "external_agent_id", nulls = Nulls.SKIP)
+        public _FinalStage externalAgentId(Optional<String> externalAgentId) {
+            this.externalAgentId = externalAgentId;
+            return this;
+        }
+
+        /**
+         * <p>Optional client ID to associate with the agent</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage clientId(String clientId) {
+            this.clientId = Optional.ofNullable(clientId);
+            return this;
+        }
+
+        /**
+         * <p>Optional client ID to associate with the agent</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "client_id", nulls = Nulls.SKIP)
+        public _FinalStage clientId(Optional<String> clientId) {
+            this.clientId = clientId;
+            return this;
+        }
+
+        @java.lang.Override
+        public CreateAgentRequestContent build() {
+            return new CreateAgentRequestContent(name, clientId, externalAgentId, metadata, additionalProperties);
+        }
+
+        @java.lang.Override
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        @java.lang.Override
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/CreateOrganizationClientRequestItem.java b/src/main/java/com/auth0/client/mgmt/types/CreateOrganizationClientRequestItem.java
new file mode 100644
index 00000000..4da36acf
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/CreateOrganizationClientRequestItem.java
@@ -0,0 +1,162 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Objects;
+import org.jetbrains.annotations.NotNull;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = CreateOrganizationClientRequestItem.Builder.class)
+public final class CreateOrganizationClientRequestItem {
+    private final String clientId;
+
+    private final boolean useForMemberAccess;
+
+    private final Map<String, Object> additionalProperties;
+
+    private CreateOrganizationClientRequestItem(
+            String clientId, boolean useForMemberAccess, Map<String, Object> additionalProperties) {
+        this.clientId = clientId;
+        this.useForMemberAccess = useForMemberAccess;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return The identifier of the client to associate.
+     */
+    @JsonProperty("client_id")
+    public String getClientId() {
+        return clientId;
+    }
+
+    /**
+     * @return Whether this client is used for member access to the organization.
+     */
+    @JsonProperty("use_for_member_access")
+    public boolean getUseForMemberAccess() {
+        return useForMemberAccess;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof CreateOrganizationClientRequestItem
+                && equalTo((CreateOrganizationClientRequestItem) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(CreateOrganizationClientRequestItem other) {
+        return clientId.equals(other.clientId) && useForMemberAccess == other.useForMemberAccess;
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.clientId, this.useForMemberAccess);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static ClientIdStage builder() {
+        return new Builder();
+    }
+
+    public interface ClientIdStage {
+        /**
+         * <p>The identifier of the client to associate.</p>
+         */
+        UseForMemberAccessStage clientId(@NotNull String clientId);
+
+        Builder from(CreateOrganizationClientRequestItem other);
+    }
+
+    public interface UseForMemberAccessStage {
+        /**
+         * <p>Whether this client is used for member access to the organization.</p>
+         */
+        _FinalStage useForMemberAccess(boolean useForMemberAccess);
+    }
+
+    public interface _FinalStage {
+        CreateOrganizationClientRequestItem build();
+
+        _FinalStage additionalProperty(String key, Object value);
+
+        _FinalStage additionalProperties(Map<String, Object> additionalProperties);
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder implements ClientIdStage, UseForMemberAccessStage, _FinalStage {
+        private String clientId;
+
+        private boolean useForMemberAccess;
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        @java.lang.Override
+        public Builder from(CreateOrganizationClientRequestItem other) {
+            clientId(other.getClientId());
+            useForMemberAccess(other.getUseForMemberAccess());
+            return this;
+        }
+
+        /**
+         * <p>The identifier of the client to associate.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        @JsonSetter("client_id")
+        public UseForMemberAccessStage clientId(@NotNull String clientId) {
+            this.clientId = Objects.requireNonNull(clientId, "clientId must not be null");
+            return this;
+        }
+
+        /**
+         * <p>Whether this client is used for member access to the organization.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        @JsonSetter("use_for_member_access")
+        public _FinalStage useForMemberAccess(boolean useForMemberAccess) {
+            this.useForMemberAccess = useForMemberAccess;
+            return this;
+        }
+
+        @java.lang.Override
+        public CreateOrganizationClientRequestItem build() {
+            return new CreateOrganizationClientRequestItem(clientId, useForMemberAccess, additionalProperties);
+        }
+
+        @java.lang.Override
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        @java.lang.Override
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/CreateOrganizationRequestContent.java b/src/main/java/com/auth0/client/mgmt/types/CreateOrganizationRequestContent.java
index a8144138..5063fda9 100644
--- a/src/main/java/com/auth0/client/mgmt/types/CreateOrganizationRequestContent.java
+++ b/src/main/java/com/auth0/client/mgmt/types/CreateOrganizationRequestContent.java
@@ -37,6 +37,8 @@ public final class CreateOrganizationRequestContent {
 
     private final Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess;
 
+    private final Optional<Boolean> isAppEntitlementActive;
+
     private final Map<String, Object> additionalProperties;
 
     private CreateOrganizationRequestContent(
@@ -47,6 +49,7 @@ private CreateOrganizationRequestContent(
             Optional<List<ConnectionForOrganization>> enabledConnections,
             Optional<CreateTokenQuota> tokenQuota,
             Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess,
+            Optional<Boolean> isAppEntitlementActive,
             Map<String, Object> additionalProperties) {
         this.name = name;
         this.displayName = displayName;
@@ -55,6 +58,7 @@ private CreateOrganizationRequestContent(
         this.enabledConnections = enabledConnections;
         this.tokenQuota = tokenQuota;
         this.thirdPartyClientAccess = thirdPartyClientAccess;
+        this.isAppEntitlementActive = isAppEntitlementActive;
         this.additionalProperties = additionalProperties;
     }
 
@@ -102,6 +106,14 @@ public Optional<OrganizationThirdPartyClientAccessEnum> getThirdPartyClientAcces
         return thirdPartyClientAccess;
     }
 
+    /**
+     * @return Whether app entitlement is active for this organization.
+     */
+    @JsonProperty("is_app_entitlement_active")
+    public Optional<Boolean> getIsAppEntitlementActive() {
+        return isAppEntitlementActive;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -120,7 +132,8 @@ private boolean equalTo(CreateOrganizationRequestContent other) {
                 && metadata.equals(other.metadata)
                 && enabledConnections.equals(other.enabledConnections)
                 && tokenQuota.equals(other.tokenQuota)
-                && thirdPartyClientAccess.equals(other.thirdPartyClientAccess);
+                && thirdPartyClientAccess.equals(other.thirdPartyClientAccess)
+                && isAppEntitlementActive.equals(other.isAppEntitlementActive);
     }
 
     @java.lang.Override
@@ -132,7 +145,8 @@ public int hashCode() {
                 this.metadata,
                 this.enabledConnections,
                 this.tokenQuota,
-                this.thirdPartyClientAccess);
+                this.thirdPartyClientAccess,
+                this.isAppEntitlementActive);
     }
 
     @java.lang.Override
@@ -189,12 +203,21 @@ public interface _FinalStage {
         _FinalStage thirdPartyClientAccess(Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess);
 
         _FinalStage thirdPartyClientAccess(OrganizationThirdPartyClientAccessEnum thirdPartyClientAccess);
+
+        /**
+         * <p>Whether app entitlement is active for this organization.</p>
+         */
+        _FinalStage isAppEntitlementActive(Optional<Boolean> isAppEntitlementActive);
+
+        _FinalStage isAppEntitlementActive(Boolean isAppEntitlementActive);
     }
 
     @JsonIgnoreProperties(ignoreUnknown = true)
     public static final class Builder implements NameStage, _FinalStage {
         private String name;
 
+        private Optional<Boolean> isAppEntitlementActive = Optional.empty();
+
         private Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess = Optional.empty();
 
         private Optional<CreateTokenQuota> tokenQuota = Optional.empty();
@@ -221,6 +244,7 @@ public Builder from(CreateOrganizationRequestContent other) {
             enabledConnections(other.getEnabledConnections());
             tokenQuota(other.getTokenQuota());
             thirdPartyClientAccess(other.getThirdPartyClientAccess());
+            isAppEntitlementActive(other.getIsAppEntitlementActive());
             return this;
         }
 
@@ -235,6 +259,26 @@ public _FinalStage name(@NotNull String name) {
             return this;
         }
 
+        /**
+         * <p>Whether app entitlement is active for this organization.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage isAppEntitlementActive(Boolean isAppEntitlementActive) {
+            this.isAppEntitlementActive = Optional.ofNullable(isAppEntitlementActive);
+            return this;
+        }
+
+        /**
+         * <p>Whether app entitlement is active for this organization.</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "is_app_entitlement_active", nulls = Nulls.SKIP)
+        public _FinalStage isAppEntitlementActive(Optional<Boolean> isAppEntitlementActive) {
+            this.isAppEntitlementActive = isAppEntitlementActive;
+            return this;
+        }
+
         @java.lang.Override
         public _FinalStage thirdPartyClientAccess(OrganizationThirdPartyClientAccessEnum thirdPartyClientAccess) {
             this.thirdPartyClientAccess = Optional.ofNullable(thirdPartyClientAccess);
@@ -338,6 +382,7 @@ public CreateOrganizationRequestContent build() {
                     enabledConnections,
                     tokenQuota,
                     thirdPartyClientAccess,
+                    isAppEntitlementActive,
                     additionalProperties);
         }
 
diff --git a/src/main/java/com/auth0/client/mgmt/types/CreateOrganizationResponseContent.java b/src/main/java/com/auth0/client/mgmt/types/CreateOrganizationResponseContent.java
index b4d13677..f91ffee9 100644
--- a/src/main/java/com/auth0/client/mgmt/types/CreateOrganizationResponseContent.java
+++ b/src/main/java/com/auth0/client/mgmt/types/CreateOrganizationResponseContent.java
@@ -36,6 +36,10 @@ public final class CreateOrganizationResponseContent {
 
     private final Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess;
 
+    private final Optional<Boolean> isAppEntitlementActive;
+
+    private final Optional<OrganizationClientAssociation> client;
+
     private final Optional<List<OrganizationEnabledConnection>> enabledConnections;
 
     private final Map<String, Object> additionalProperties;
@@ -48,6 +52,8 @@ private CreateOrganizationResponseContent(
             Optional<Map<String, OptionalNullable<String>>> metadata,
             Optional<TokenQuota> tokenQuota,
             Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess,
+            Optional<Boolean> isAppEntitlementActive,
+            Optional<OrganizationClientAssociation> client,
             Optional<List<OrganizationEnabledConnection>> enabledConnections,
             Map<String, Object> additionalProperties) {
         this.id = id;
@@ -57,6 +63,8 @@ private CreateOrganizationResponseContent(
         this.metadata = metadata;
         this.tokenQuota = tokenQuota;
         this.thirdPartyClientAccess = thirdPartyClientAccess;
+        this.isAppEntitlementActive = isAppEntitlementActive;
+        this.client = client;
         this.enabledConnections = enabledConnections;
         this.additionalProperties = additionalProperties;
     }
@@ -105,6 +113,19 @@ public Optional<OrganizationThirdPartyClientAccessEnum> getThirdPartyClientAcces
         return thirdPartyClientAccess;
     }
 
+    /**
+     * @return Whether app entitlement is active for this organization.
+     */
+    @JsonProperty("is_app_entitlement_active")
+    public Optional<Boolean> getIsAppEntitlementActive() {
+        return isAppEntitlementActive;
+    }
+
+    @JsonProperty("client")
+    public Optional<OrganizationClientAssociation> getClient() {
+        return client;
+    }
+
     @JsonProperty("enabled_connections")
     public Optional<List<OrganizationEnabledConnection>> getEnabledConnections() {
         return enabledConnections;
@@ -129,6 +150,8 @@ private boolean equalTo(CreateOrganizationResponseContent other) {
                 && metadata.equals(other.metadata)
                 && tokenQuota.equals(other.tokenQuota)
                 && thirdPartyClientAccess.equals(other.thirdPartyClientAccess)
+                && isAppEntitlementActive.equals(other.isAppEntitlementActive)
+                && client.equals(other.client)
                 && enabledConnections.equals(other.enabledConnections);
     }
 
@@ -142,6 +165,8 @@ public int hashCode() {
                 this.metadata,
                 this.tokenQuota,
                 this.thirdPartyClientAccess,
+                this.isAppEntitlementActive,
+                this.client,
                 this.enabledConnections);
     }
 
@@ -170,6 +195,10 @@ public static final class Builder {
 
         private Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess = Optional.empty();
 
+        private Optional<Boolean> isAppEntitlementActive = Optional.empty();
+
+        private Optional<OrganizationClientAssociation> client = Optional.empty();
+
         private Optional<List<OrganizationEnabledConnection>> enabledConnections = Optional.empty();
 
         @JsonAnySetter
@@ -185,6 +214,8 @@ public Builder from(CreateOrganizationResponseContent other) {
             metadata(other.getMetadata());
             tokenQuota(other.getTokenQuota());
             thirdPartyClientAccess(other.getThirdPartyClientAccess());
+            isAppEntitlementActive(other.getIsAppEntitlementActive());
+            client(other.getClient());
             enabledConnections(other.getEnabledConnections());
             return this;
         }
@@ -275,6 +306,31 @@ public Builder thirdPartyClientAccess(OrganizationThirdPartyClientAccessEnum thi
             return this;
         }
 
+        /**
+         * <p>Whether app entitlement is active for this organization.</p>
+         */
+        @JsonSetter(value = "is_app_entitlement_active", nulls = Nulls.SKIP)
+        public Builder isAppEntitlementActive(Optional<Boolean> isAppEntitlementActive) {
+            this.isAppEntitlementActive = isAppEntitlementActive;
+            return this;
+        }
+
+        public Builder isAppEntitlementActive(Boolean isAppEntitlementActive) {
+            this.isAppEntitlementActive = Optional.ofNullable(isAppEntitlementActive);
+            return this;
+        }
+
+        @JsonSetter(value = "client", nulls = Nulls.SKIP)
+        public Builder client(Optional<OrganizationClientAssociation> client) {
+            this.client = client;
+            return this;
+        }
+
+        public Builder client(OrganizationClientAssociation client) {
+            this.client = Optional.ofNullable(client);
+            return this;
+        }
+
         @JsonSetter(value = "enabled_connections", nulls = Nulls.SKIP)
         public Builder enabledConnections(Optional<List<OrganizationEnabledConnection>> enabledConnections) {
             this.enabledConnections = enabledConnections;
@@ -295,6 +351,8 @@ public CreateOrganizationResponseContent build() {
                     metadata,
                     tokenQuota,
                     thirdPartyClientAccess,
+                    isAppEntitlementActive,
+                    client,
                     enabledConnections,
                     additionalProperties);
         }
diff --git a/src/main/java/com/auth0/client/mgmt/types/CreateRoleRequestContent.java b/src/main/java/com/auth0/client/mgmt/types/CreateRoleRequestContent.java
index db9667d8..2e9f5909 100644
--- a/src/main/java/com/auth0/client/mgmt/types/CreateRoleRequestContent.java
+++ b/src/main/java/com/auth0/client/mgmt/types/CreateRoleRequestContent.java
@@ -25,12 +25,22 @@ public final class CreateRoleRequestContent {
 
     private final Optional<String> description;
 
+    private final Optional<RoleTypeEnum> type;
+
+    private final Optional<String> ownerId;
+
     private final Map<String, Object> additionalProperties;
 
     private CreateRoleRequestContent(
-            String name, Optional<String> description, Map<String, Object> additionalProperties) {
+            String name,
+            Optional<String> description,
+            Optional<RoleTypeEnum> type,
+            Optional<String> ownerId,
+            Map<String, Object> additionalProperties) {
         this.name = name;
         this.description = description;
+        this.type = type;
+        this.ownerId = ownerId;
         this.additionalProperties = additionalProperties;
     }
 
@@ -50,6 +60,22 @@ public Optional<String> getDescription() {
         return description;
     }
 
+    /**
+     * @return The type of the role. Defaults to tenant.
+     */
+    @JsonProperty("type")
+    public Optional<RoleTypeEnum> getType() {
+        return type;
+    }
+
+    /**
+     * @return The ID of the organization that owns this role. Required when type is &quot;organization&quot;.
+     */
+    @JsonProperty("owner_id")
+    public Optional<String> getOwnerId() {
+        return ownerId;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -62,12 +88,15 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(CreateRoleRequestContent other) {
-        return name.equals(other.name) && description.equals(other.description);
+        return name.equals(other.name)
+                && description.equals(other.description)
+                && type.equals(other.type)
+                && ownerId.equals(other.ownerId);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.name, this.description);
+        return Objects.hash(this.name, this.description, this.type, this.ownerId);
     }
 
     @java.lang.Override
@@ -101,12 +130,30 @@ public interface _FinalStage {
         _FinalStage description(Optional<String> description);
 
         _FinalStage description(String description);
+
+        /**
+         * <p>The type of the role. Defaults to tenant.</p>
+         */
+        _FinalStage type(Optional<RoleTypeEnum> type);
+
+        _FinalStage type(RoleTypeEnum type);
+
+        /**
+         * <p>The ID of the organization that owns this role. Required when type is &quot;organization&quot;.</p>
+         */
+        _FinalStage ownerId(Optional<String> ownerId);
+
+        _FinalStage ownerId(String ownerId);
     }
 
     @JsonIgnoreProperties(ignoreUnknown = true)
     public static final class Builder implements NameStage, _FinalStage {
         private String name;
 
+        private Optional<String> ownerId = Optional.empty();
+
+        private Optional<RoleTypeEnum> type = Optional.empty();
+
         private Optional<String> description = Optional.empty();
 
         @JsonAnySetter
@@ -118,6 +165,8 @@ private Builder() {}
         public Builder from(CreateRoleRequestContent other) {
             name(other.getName());
             description(other.getDescription());
+            type(other.getType());
+            ownerId(other.getOwnerId());
             return this;
         }
 
@@ -132,6 +181,46 @@ public _FinalStage name(@NotNull String name) {
             return this;
         }
 
+        /**
+         * <p>The ID of the organization that owns this role. Required when type is &quot;organization&quot;.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage ownerId(String ownerId) {
+            this.ownerId = Optional.ofNullable(ownerId);
+            return this;
+        }
+
+        /**
+         * <p>The ID of the organization that owns this role. Required when type is &quot;organization&quot;.</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "owner_id", nulls = Nulls.SKIP)
+        public _FinalStage ownerId(Optional<String> ownerId) {
+            this.ownerId = ownerId;
+            return this;
+        }
+
+        /**
+         * <p>The type of the role. Defaults to tenant.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage type(RoleTypeEnum type) {
+            this.type = Optional.ofNullable(type);
+            return this;
+        }
+
+        /**
+         * <p>The type of the role. Defaults to tenant.</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "type", nulls = Nulls.SKIP)
+        public _FinalStage type(Optional<RoleTypeEnum> type) {
+            this.type = type;
+            return this;
+        }
+
         /**
          * <p>Description of the role.</p>
          * @return Reference to {@code this} so that method calls can be chained together.
@@ -154,7 +243,7 @@ public _FinalStage description(Optional<String> description) {
 
         @java.lang.Override
         public CreateRoleRequestContent build() {
-            return new CreateRoleRequestContent(name, description, additionalProperties);
+            return new CreateRoleRequestContent(name, description, type, ownerId, additionalProperties);
         }
 
         @java.lang.Override
diff --git a/src/main/java/com/auth0/client/mgmt/types/CreateRoleResponseContent.java b/src/main/java/com/auth0/client/mgmt/types/CreateRoleResponseContent.java
index a58277c5..30c715c0 100644
--- a/src/main/java/com/auth0/client/mgmt/types/CreateRoleResponseContent.java
+++ b/src/main/java/com/auth0/client/mgmt/types/CreateRoleResponseContent.java
@@ -26,16 +26,24 @@ public final class CreateRoleResponseContent {
 
     private final Optional<String> description;
 
+    private final Optional<RoleTypeEnum> type;
+
+    private final Optional<String> ownerId;
+
     private final Map<String, Object> additionalProperties;
 
     private CreateRoleResponseContent(
             Optional<String> id,
             Optional<String> name,
             Optional<String> description,
+            Optional<RoleTypeEnum> type,
+            Optional<String> ownerId,
             Map<String, Object> additionalProperties) {
         this.id = id;
         this.name = name;
         this.description = description;
+        this.type = type;
+        this.ownerId = ownerId;
         this.additionalProperties = additionalProperties;
     }
 
@@ -63,6 +71,19 @@ public Optional<String> getDescription() {
         return description;
     }
 
+    @JsonProperty("type")
+    public Optional<RoleTypeEnum> getType() {
+        return type;
+    }
+
+    /**
+     * @return The id of the entity that owns this role, such as an organization id.
+     */
+    @JsonProperty("owner_id")
+    public Optional<String> getOwnerId() {
+        return ownerId;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -75,12 +96,16 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(CreateRoleResponseContent other) {
-        return id.equals(other.id) && name.equals(other.name) && description.equals(other.description);
+        return id.equals(other.id)
+                && name.equals(other.name)
+                && description.equals(other.description)
+                && type.equals(other.type)
+                && ownerId.equals(other.ownerId);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.id, this.name, this.description);
+        return Objects.hash(this.id, this.name, this.description, this.type, this.ownerId);
     }
 
     @java.lang.Override
@@ -100,6 +125,10 @@ public static final class Builder {
 
         private Optional<String> description = Optional.empty();
 
+        private Optional<RoleTypeEnum> type = Optional.empty();
+
+        private Optional<String> ownerId = Optional.empty();
+
         @JsonAnySetter
         private Map<String, Object> additionalProperties = new HashMap<>();
 
@@ -109,6 +138,8 @@ public Builder from(CreateRoleResponseContent other) {
             id(other.getId());
             name(other.getName());
             description(other.getDescription());
+            type(other.getType());
+            ownerId(other.getOwnerId());
             return this;
         }
 
@@ -154,8 +185,33 @@ public Builder description(String description) {
             return this;
         }
 
+        @JsonSetter(value = "type", nulls = Nulls.SKIP)
+        public Builder type(Optional<RoleTypeEnum> type) {
+            this.type = type;
+            return this;
+        }
+
+        public Builder type(RoleTypeEnum type) {
+            this.type = Optional.ofNullable(type);
+            return this;
+        }
+
+        /**
+         * <p>The id of the entity that owns this role, such as an organization id.</p>
+         */
+        @JsonSetter(value = "owner_id", nulls = Nulls.SKIP)
+        public Builder ownerId(Optional<String> ownerId) {
+            this.ownerId = ownerId;
+            return this;
+        }
+
+        public Builder ownerId(String ownerId) {
+            this.ownerId = Optional.ofNullable(ownerId);
+            return this;
+        }
+
         public CreateRoleResponseContent build() {
-            return new CreateRoleResponseContent(id, name, description, additionalProperties);
+            return new CreateRoleResponseContent(id, name, description, type, ownerId, additionalProperties);
         }
 
         public Builder additionalProperty(String key, Object value) {
diff --git a/src/main/java/com/auth0/client/mgmt/types/EventStreamCloudEvent.java b/src/main/java/com/auth0/client/mgmt/types/EventStreamCloudEvent.java
index 2395092e..4c6f7b3c 100644
--- a/src/main/java/com/auth0/client/mgmt/types/EventStreamCloudEvent.java
+++ b/src/main/java/com/auth0/client/mgmt/types/EventStreamCloudEvent.java
@@ -31,7 +31,7 @@ public final class EventStreamCloudEvent {
 
     private final Optional<OffsetDateTime> time;
 
-    private final Optional<String> data;
+    private final Optional<Map<String, Object>> data;
 
     private final Map<String, Object> additionalProperties;
 
@@ -41,7 +41,7 @@ private EventStreamCloudEvent(
             Optional<String> specversion,
             Optional<String> type,
             Optional<OffsetDateTime> time,
-            Optional<String> data,
+            Optional<Map<String, Object>> data,
             Map<String, Object> additionalProperties) {
         this.id = id;
         this.source = source;
@@ -92,11 +92,8 @@ public Optional<OffsetDateTime> getTime() {
         return time;
     }
 
-    /**
-     * @return Event contents encoded as a string.
-     */
     @JsonProperty("data")
-    public Optional<String> getData() {
+    public Optional<Map<String, Object>> getData() {
         return data;
     }
 
@@ -146,7 +143,7 @@ public static final class Builder {
 
         private Optional<OffsetDateTime> time = Optional.empty();
 
-        private Optional<String> data = Optional.empty();
+        private Optional<Map<String, Object>> data = Optional.empty();
 
         @JsonAnySetter
         private Map<String, Object> additionalProperties = new HashMap<>();
@@ -233,16 +230,13 @@ public Builder time(OffsetDateTime time) {
             return this;
         }
 
-        /**
-         * <p>Event contents encoded as a string.</p>
-         */
         @JsonSetter(value = "data", nulls = Nulls.SKIP)
-        public Builder data(Optional<String> data) {
+        public Builder data(Optional<Map<String, Object>> data) {
             this.data = data;
             return this;
         }
 
-        public Builder data(String data) {
+        public Builder data(Map<String, Object> data) {
             this.data = Optional.ofNullable(data);
             return this;
         }
diff --git a/src/main/java/com/auth0/client/mgmt/types/EventStreamDeliveryAttempt.java b/src/main/java/com/auth0/client/mgmt/types/EventStreamDeliveryAttempt.java
index a66e1105..9eccf260 100644
--- a/src/main/java/com/auth0/client/mgmt/types/EventStreamDeliveryAttempt.java
+++ b/src/main/java/com/auth0/client/mgmt/types/EventStreamDeliveryAttempt.java
@@ -28,16 +28,20 @@ public final class EventStreamDeliveryAttempt {
 
     private final Optional<String> errorMessage;
 
+    private final Optional<Double> duration;
+
     private final Map<String, Object> additionalProperties;
 
     private EventStreamDeliveryAttempt(
             EventStreamDeliveryStatusEnum status,
             OffsetDateTime timestamp,
             Optional<String> errorMessage,
+            Optional<Double> duration,
             Map<String, Object> additionalProperties) {
         this.status = status;
         this.timestamp = timestamp;
         this.errorMessage = errorMessage;
+        this.duration = duration;
         this.additionalProperties = additionalProperties;
     }
 
@@ -62,6 +66,14 @@ public Optional<String> getErrorMessage() {
         return errorMessage;
     }
 
+    /**
+     * @return Duration of the delivery attempt in milliseconds
+     */
+    @JsonProperty("duration")
+    public Optional<Double> getDuration() {
+        return duration;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -76,12 +88,13 @@ public Map<String, Object> getAdditionalProperties() {
     private boolean equalTo(EventStreamDeliveryAttempt other) {
         return status.equals(other.status)
                 && timestamp.equals(other.timestamp)
-                && errorMessage.equals(other.errorMessage);
+                && errorMessage.equals(other.errorMessage)
+                && duration.equals(other.duration);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.status, this.timestamp, this.errorMessage);
+        return Objects.hash(this.status, this.timestamp, this.errorMessage, this.duration);
     }
 
     @java.lang.Override
@@ -119,6 +132,13 @@ public interface _FinalStage {
         _FinalStage errorMessage(Optional<String> errorMessage);
 
         _FinalStage errorMessage(String errorMessage);
+
+        /**
+         * <p>Duration of the delivery attempt in milliseconds</p>
+         */
+        _FinalStage duration(Optional<Double> duration);
+
+        _FinalStage duration(Double duration);
     }
 
     @JsonIgnoreProperties(ignoreUnknown = true)
@@ -127,6 +147,8 @@ public static final class Builder implements StatusStage, TimestampStage, _Final
 
         private OffsetDateTime timestamp;
 
+        private Optional<Double> duration = Optional.empty();
+
         private Optional<String> errorMessage = Optional.empty();
 
         @JsonAnySetter
@@ -139,6 +161,7 @@ public Builder from(EventStreamDeliveryAttempt other) {
             status(other.getStatus());
             timestamp(other.getTimestamp());
             errorMessage(other.getErrorMessage());
+            duration(other.getDuration());
             return this;
         }
 
@@ -160,6 +183,26 @@ public _FinalStage timestamp(@NotNull OffsetDateTime timestamp) {
             return this;
         }
 
+        /**
+         * <p>Duration of the delivery attempt in milliseconds</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage duration(Double duration) {
+            this.duration = Optional.ofNullable(duration);
+            return this;
+        }
+
+        /**
+         * <p>Duration of the delivery attempt in milliseconds</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "duration", nulls = Nulls.SKIP)
+        public _FinalStage duration(Optional<Double> duration) {
+            this.duration = duration;
+            return this;
+        }
+
         /**
          * <p>Delivery error message, if applicable</p>
          * @return Reference to {@code this} so that method calls can be chained together.
@@ -182,7 +225,7 @@ public _FinalStage errorMessage(Optional<String> errorMessage) {
 
         @java.lang.Override
         public EventStreamDeliveryAttempt build() {
-            return new EventStreamDeliveryAttempt(status, timestamp, errorMessage, additionalProperties);
+            return new EventStreamDeliveryAttempt(status, timestamp, errorMessage, duration, additionalProperties);
         }
 
         @java.lang.Override
diff --git a/src/main/java/com/auth0/client/mgmt/types/GetOrganizationByNameResponseContent.java b/src/main/java/com/auth0/client/mgmt/types/GetOrganizationByNameResponseContent.java
index 4cdc3960..709f7de8 100644
--- a/src/main/java/com/auth0/client/mgmt/types/GetOrganizationByNameResponseContent.java
+++ b/src/main/java/com/auth0/client/mgmt/types/GetOrganizationByNameResponseContent.java
@@ -35,6 +35,10 @@ public final class GetOrganizationByNameResponseContent {
 
     private final Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess;
 
+    private final Optional<Boolean> isAppEntitlementActive;
+
+    private final Optional<OrganizationClientAssociation> client;
+
     private final Map<String, Object> additionalProperties;
 
     private GetOrganizationByNameResponseContent(
@@ -45,6 +49,8 @@ private GetOrganizationByNameResponseContent(
             Optional<Map<String, OptionalNullable<String>>> metadata,
             Optional<TokenQuota> tokenQuota,
             Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess,
+            Optional<Boolean> isAppEntitlementActive,
+            Optional<OrganizationClientAssociation> client,
             Map<String, Object> additionalProperties) {
         this.id = id;
         this.name = name;
@@ -53,6 +59,8 @@ private GetOrganizationByNameResponseContent(
         this.metadata = metadata;
         this.tokenQuota = tokenQuota;
         this.thirdPartyClientAccess = thirdPartyClientAccess;
+        this.isAppEntitlementActive = isAppEntitlementActive;
+        this.client = client;
         this.additionalProperties = additionalProperties;
     }
 
@@ -100,6 +108,19 @@ public Optional<OrganizationThirdPartyClientAccessEnum> getThirdPartyClientAcces
         return thirdPartyClientAccess;
     }
 
+    /**
+     * @return Whether app entitlement is active for this organization.
+     */
+    @JsonProperty("is_app_entitlement_active")
+    public Optional<Boolean> getIsAppEntitlementActive() {
+        return isAppEntitlementActive;
+    }
+
+    @JsonProperty("client")
+    public Optional<OrganizationClientAssociation> getClient() {
+        return client;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -119,7 +140,9 @@ private boolean equalTo(GetOrganizationByNameResponseContent other) {
                 && branding.equals(other.branding)
                 && metadata.equals(other.metadata)
                 && tokenQuota.equals(other.tokenQuota)
-                && thirdPartyClientAccess.equals(other.thirdPartyClientAccess);
+                && thirdPartyClientAccess.equals(other.thirdPartyClientAccess)
+                && isAppEntitlementActive.equals(other.isAppEntitlementActive)
+                && client.equals(other.client);
     }
 
     @java.lang.Override
@@ -131,7 +154,9 @@ public int hashCode() {
                 this.branding,
                 this.metadata,
                 this.tokenQuota,
-                this.thirdPartyClientAccess);
+                this.thirdPartyClientAccess,
+                this.isAppEntitlementActive,
+                this.client);
     }
 
     @java.lang.Override
@@ -159,6 +184,10 @@ public static final class Builder {
 
         private Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess = Optional.empty();
 
+        private Optional<Boolean> isAppEntitlementActive = Optional.empty();
+
+        private Optional<OrganizationClientAssociation> client = Optional.empty();
+
         @JsonAnySetter
         private Map<String, Object> additionalProperties = new HashMap<>();
 
@@ -172,6 +201,8 @@ public Builder from(GetOrganizationByNameResponseContent other) {
             metadata(other.getMetadata());
             tokenQuota(other.getTokenQuota());
             thirdPartyClientAccess(other.getThirdPartyClientAccess());
+            isAppEntitlementActive(other.getIsAppEntitlementActive());
+            client(other.getClient());
             return this;
         }
 
@@ -261,6 +292,31 @@ public Builder thirdPartyClientAccess(OrganizationThirdPartyClientAccessEnum thi
             return this;
         }
 
+        /**
+         * <p>Whether app entitlement is active for this organization.</p>
+         */
+        @JsonSetter(value = "is_app_entitlement_active", nulls = Nulls.SKIP)
+        public Builder isAppEntitlementActive(Optional<Boolean> isAppEntitlementActive) {
+            this.isAppEntitlementActive = isAppEntitlementActive;
+            return this;
+        }
+
+        public Builder isAppEntitlementActive(Boolean isAppEntitlementActive) {
+            this.isAppEntitlementActive = Optional.ofNullable(isAppEntitlementActive);
+            return this;
+        }
+
+        @JsonSetter(value = "client", nulls = Nulls.SKIP)
+        public Builder client(Optional<OrganizationClientAssociation> client) {
+            this.client = client;
+            return this;
+        }
+
+        public Builder client(OrganizationClientAssociation client) {
+            this.client = Optional.ofNullable(client);
+            return this;
+        }
+
         public GetOrganizationByNameResponseContent build() {
             return new GetOrganizationByNameResponseContent(
                     id,
@@ -270,6 +326,8 @@ public GetOrganizationByNameResponseContent build() {
                     metadata,
                     tokenQuota,
                     thirdPartyClientAccess,
+                    isAppEntitlementActive,
+                    client,
                     additionalProperties);
         }
 
diff --git a/src/main/java/com/auth0/client/mgmt/types/GetOrganizationClientResponseContent.java b/src/main/java/com/auth0/client/mgmt/types/GetOrganizationClientResponseContent.java
new file mode 100644
index 00000000..e05e9153
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/GetOrganizationClientResponseContent.java
@@ -0,0 +1,189 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Objects;
+import org.jetbrains.annotations.NotNull;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = GetOrganizationClientResponseContent.Builder.class)
+public final class GetOrganizationClientResponseContent {
+    private final String clientId;
+
+    private final boolean useForMemberAccess;
+
+    private final OrganizationClientMetadata client;
+
+    private final Map<String, Object> additionalProperties;
+
+    private GetOrganizationClientResponseContent(
+            String clientId,
+            boolean useForMemberAccess,
+            OrganizationClientMetadata client,
+            Map<String, Object> additionalProperties) {
+        this.clientId = clientId;
+        this.useForMemberAccess = useForMemberAccess;
+        this.client = client;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return The identifier of the client associated with the organization.
+     */
+    @JsonProperty("client_id")
+    public String getClientId() {
+        return clientId;
+    }
+
+    /**
+     * @return Whether this client is used for member access to the organization.
+     */
+    @JsonProperty("use_for_member_access")
+    public boolean getUseForMemberAccess() {
+        return useForMemberAccess;
+    }
+
+    @JsonProperty("client")
+    public OrganizationClientMetadata getClient() {
+        return client;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof GetOrganizationClientResponseContent
+                && equalTo((GetOrganizationClientResponseContent) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(GetOrganizationClientResponseContent other) {
+        return clientId.equals(other.clientId)
+                && useForMemberAccess == other.useForMemberAccess
+                && client.equals(other.client);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.clientId, this.useForMemberAccess, this.client);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static ClientIdStage builder() {
+        return new Builder();
+    }
+
+    public interface ClientIdStage {
+        /**
+         * <p>The identifier of the client associated with the organization.</p>
+         */
+        UseForMemberAccessStage clientId(@NotNull String clientId);
+
+        Builder from(GetOrganizationClientResponseContent other);
+    }
+
+    public interface UseForMemberAccessStage {
+        /**
+         * <p>Whether this client is used for member access to the organization.</p>
+         */
+        ClientStage useForMemberAccess(boolean useForMemberAccess);
+    }
+
+    public interface ClientStage {
+        _FinalStage client(@NotNull OrganizationClientMetadata client);
+    }
+
+    public interface _FinalStage {
+        GetOrganizationClientResponseContent build();
+
+        _FinalStage additionalProperty(String key, Object value);
+
+        _FinalStage additionalProperties(Map<String, Object> additionalProperties);
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder implements ClientIdStage, UseForMemberAccessStage, ClientStage, _FinalStage {
+        private String clientId;
+
+        private boolean useForMemberAccess;
+
+        private OrganizationClientMetadata client;
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        @java.lang.Override
+        public Builder from(GetOrganizationClientResponseContent other) {
+            clientId(other.getClientId());
+            useForMemberAccess(other.getUseForMemberAccess());
+            client(other.getClient());
+            return this;
+        }
+
+        /**
+         * <p>The identifier of the client associated with the organization.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        @JsonSetter("client_id")
+        public UseForMemberAccessStage clientId(@NotNull String clientId) {
+            this.clientId = Objects.requireNonNull(clientId, "clientId must not be null");
+            return this;
+        }
+
+        /**
+         * <p>Whether this client is used for member access to the organization.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        @JsonSetter("use_for_member_access")
+        public ClientStage useForMemberAccess(boolean useForMemberAccess) {
+            this.useForMemberAccess = useForMemberAccess;
+            return this;
+        }
+
+        @java.lang.Override
+        @JsonSetter("client")
+        public _FinalStage client(@NotNull OrganizationClientMetadata client) {
+            this.client = Objects.requireNonNull(client, "client must not be null");
+            return this;
+        }
+
+        @java.lang.Override
+        public GetOrganizationClientResponseContent build() {
+            return new GetOrganizationClientResponseContent(clientId, useForMemberAccess, client, additionalProperties);
+        }
+
+        @java.lang.Override
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        @java.lang.Override
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/GetOrganizationResponseContent.java b/src/main/java/com/auth0/client/mgmt/types/GetOrganizationResponseContent.java
index 61d72f70..9eb5b5b4 100644
--- a/src/main/java/com/auth0/client/mgmt/types/GetOrganizationResponseContent.java
+++ b/src/main/java/com/auth0/client/mgmt/types/GetOrganizationResponseContent.java
@@ -35,6 +35,10 @@ public final class GetOrganizationResponseContent {
 
     private final Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess;
 
+    private final Optional<Boolean> isAppEntitlementActive;
+
+    private final Optional<OrganizationClientAssociation> client;
+
     private final Map<String, Object> additionalProperties;
 
     private GetOrganizationResponseContent(
@@ -45,6 +49,8 @@ private GetOrganizationResponseContent(
             Optional<Map<String, OptionalNullable<String>>> metadata,
             Optional<TokenQuota> tokenQuota,
             Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess,
+            Optional<Boolean> isAppEntitlementActive,
+            Optional<OrganizationClientAssociation> client,
             Map<String, Object> additionalProperties) {
         this.id = id;
         this.name = name;
@@ -53,6 +59,8 @@ private GetOrganizationResponseContent(
         this.metadata = metadata;
         this.tokenQuota = tokenQuota;
         this.thirdPartyClientAccess = thirdPartyClientAccess;
+        this.isAppEntitlementActive = isAppEntitlementActive;
+        this.client = client;
         this.additionalProperties = additionalProperties;
     }
 
@@ -100,6 +108,19 @@ public Optional<OrganizationThirdPartyClientAccessEnum> getThirdPartyClientAcces
         return thirdPartyClientAccess;
     }
 
+    /**
+     * @return Whether app entitlement is active for this organization.
+     */
+    @JsonProperty("is_app_entitlement_active")
+    public Optional<Boolean> getIsAppEntitlementActive() {
+        return isAppEntitlementActive;
+    }
+
+    @JsonProperty("client")
+    public Optional<OrganizationClientAssociation> getClient() {
+        return client;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -118,7 +139,9 @@ private boolean equalTo(GetOrganizationResponseContent other) {
                 && branding.equals(other.branding)
                 && metadata.equals(other.metadata)
                 && tokenQuota.equals(other.tokenQuota)
-                && thirdPartyClientAccess.equals(other.thirdPartyClientAccess);
+                && thirdPartyClientAccess.equals(other.thirdPartyClientAccess)
+                && isAppEntitlementActive.equals(other.isAppEntitlementActive)
+                && client.equals(other.client);
     }
 
     @java.lang.Override
@@ -130,7 +153,9 @@ public int hashCode() {
                 this.branding,
                 this.metadata,
                 this.tokenQuota,
-                this.thirdPartyClientAccess);
+                this.thirdPartyClientAccess,
+                this.isAppEntitlementActive,
+                this.client);
     }
 
     @java.lang.Override
@@ -158,6 +183,10 @@ public static final class Builder {
 
         private Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess = Optional.empty();
 
+        private Optional<Boolean> isAppEntitlementActive = Optional.empty();
+
+        private Optional<OrganizationClientAssociation> client = Optional.empty();
+
         @JsonAnySetter
         private Map<String, Object> additionalProperties = new HashMap<>();
 
@@ -171,6 +200,8 @@ public Builder from(GetOrganizationResponseContent other) {
             metadata(other.getMetadata());
             tokenQuota(other.getTokenQuota());
             thirdPartyClientAccess(other.getThirdPartyClientAccess());
+            isAppEntitlementActive(other.getIsAppEntitlementActive());
+            client(other.getClient());
             return this;
         }
 
@@ -260,6 +291,31 @@ public Builder thirdPartyClientAccess(OrganizationThirdPartyClientAccessEnum thi
             return this;
         }
 
+        /**
+         * <p>Whether app entitlement is active for this organization.</p>
+         */
+        @JsonSetter(value = "is_app_entitlement_active", nulls = Nulls.SKIP)
+        public Builder isAppEntitlementActive(Optional<Boolean> isAppEntitlementActive) {
+            this.isAppEntitlementActive = isAppEntitlementActive;
+            return this;
+        }
+
+        public Builder isAppEntitlementActive(Boolean isAppEntitlementActive) {
+            this.isAppEntitlementActive = Optional.ofNullable(isAppEntitlementActive);
+            return this;
+        }
+
+        @JsonSetter(value = "client", nulls = Nulls.SKIP)
+        public Builder client(Optional<OrganizationClientAssociation> client) {
+            this.client = client;
+            return this;
+        }
+
+        public Builder client(OrganizationClientAssociation client) {
+            this.client = Optional.ofNullable(client);
+            return this;
+        }
+
         public GetOrganizationResponseContent build() {
             return new GetOrganizationResponseContent(
                     id,
@@ -269,6 +325,8 @@ public GetOrganizationResponseContent build() {
                     metadata,
                     tokenQuota,
                     thirdPartyClientAccess,
+                    isAppEntitlementActive,
+                    client,
                     additionalProperties);
         }
 
diff --git a/src/main/java/com/auth0/client/mgmt/types/GetRoleResponseContent.java b/src/main/java/com/auth0/client/mgmt/types/GetRoleResponseContent.java
index 0ead2bc8..bbf45d83 100644
--- a/src/main/java/com/auth0/client/mgmt/types/GetRoleResponseContent.java
+++ b/src/main/java/com/auth0/client/mgmt/types/GetRoleResponseContent.java
@@ -26,16 +26,24 @@ public final class GetRoleResponseContent {
 
     private final Optional<String> description;
 
+    private final Optional<RoleTypeEnum> type;
+
+    private final Optional<String> ownerId;
+
     private final Map<String, Object> additionalProperties;
 
     private GetRoleResponseContent(
             Optional<String> id,
             Optional<String> name,
             Optional<String> description,
+            Optional<RoleTypeEnum> type,
+            Optional<String> ownerId,
             Map<String, Object> additionalProperties) {
         this.id = id;
         this.name = name;
         this.description = description;
+        this.type = type;
+        this.ownerId = ownerId;
         this.additionalProperties = additionalProperties;
     }
 
@@ -63,6 +71,19 @@ public Optional<String> getDescription() {
         return description;
     }
 
+    @JsonProperty("type")
+    public Optional<RoleTypeEnum> getType() {
+        return type;
+    }
+
+    /**
+     * @return The id of the entity that owns this role, such as an organization id.
+     */
+    @JsonProperty("owner_id")
+    public Optional<String> getOwnerId() {
+        return ownerId;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -75,12 +96,16 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(GetRoleResponseContent other) {
-        return id.equals(other.id) && name.equals(other.name) && description.equals(other.description);
+        return id.equals(other.id)
+                && name.equals(other.name)
+                && description.equals(other.description)
+                && type.equals(other.type)
+                && ownerId.equals(other.ownerId);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.id, this.name, this.description);
+        return Objects.hash(this.id, this.name, this.description, this.type, this.ownerId);
     }
 
     @java.lang.Override
@@ -100,6 +125,10 @@ public static final class Builder {
 
         private Optional<String> description = Optional.empty();
 
+        private Optional<RoleTypeEnum> type = Optional.empty();
+
+        private Optional<String> ownerId = Optional.empty();
+
         @JsonAnySetter
         private Map<String, Object> additionalProperties = new HashMap<>();
 
@@ -109,6 +138,8 @@ public Builder from(GetRoleResponseContent other) {
             id(other.getId());
             name(other.getName());
             description(other.getDescription());
+            type(other.getType());
+            ownerId(other.getOwnerId());
             return this;
         }
 
@@ -154,8 +185,33 @@ public Builder description(String description) {
             return this;
         }
 
+        @JsonSetter(value = "type", nulls = Nulls.SKIP)
+        public Builder type(Optional<RoleTypeEnum> type) {
+            this.type = type;
+            return this;
+        }
+
+        public Builder type(RoleTypeEnum type) {
+            this.type = Optional.ofNullable(type);
+            return this;
+        }
+
+        /**
+         * <p>The id of the entity that owns this role, such as an organization id.</p>
+         */
+        @JsonSetter(value = "owner_id", nulls = Nulls.SKIP)
+        public Builder ownerId(Optional<String> ownerId) {
+            this.ownerId = ownerId;
+            return this;
+        }
+
+        public Builder ownerId(String ownerId) {
+            this.ownerId = Optional.ofNullable(ownerId);
+            return this;
+        }
+
         public GetRoleResponseContent build() {
-            return new GetRoleResponseContent(id, name, description, additionalProperties);
+            return new GetRoleResponseContent(id, name, description, type, ownerId, additionalProperties);
         }
 
         public Builder additionalProperty(String key, Object value) {
diff --git a/src/main/java/com/auth0/client/mgmt/types/GuardianFactor.java b/src/main/java/com/auth0/client/mgmt/types/GuardianFactor.java
index be1fb69f..64428a84 100644
--- a/src/main/java/com/auth0/client/mgmt/types/GuardianFactor.java
+++ b/src/main/java/com/auth0/client/mgmt/types/GuardianFactor.java
@@ -26,16 +26,20 @@ public final class GuardianFactor {
 
     private final Optional<GuardianFactorNameEnum> name;
 
+    private final Optional<GuardianFactorSettings> settings;
+
     private final Map<String, Object> additionalProperties;
 
     private GuardianFactor(
             boolean enabled,
             Optional<Boolean> trialExpired,
             Optional<GuardianFactorNameEnum> name,
+            Optional<GuardianFactorSettings> settings,
             Map<String, Object> additionalProperties) {
         this.enabled = enabled;
         this.trialExpired = trialExpired;
         this.name = name;
+        this.settings = settings;
         this.additionalProperties = additionalProperties;
     }
 
@@ -60,6 +64,11 @@ public Optional<GuardianFactorNameEnum> getName() {
         return name;
     }
 
+    @JsonProperty("settings")
+    public Optional<GuardianFactorSettings> getSettings() {
+        return settings;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -72,12 +81,15 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(GuardianFactor other) {
-        return enabled == other.enabled && trialExpired.equals(other.trialExpired) && name.equals(other.name);
+        return enabled == other.enabled
+                && trialExpired.equals(other.trialExpired)
+                && name.equals(other.name)
+                && settings.equals(other.settings);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.enabled, this.trialExpired, this.name);
+        return Objects.hash(this.enabled, this.trialExpired, this.name, this.settings);
     }
 
     @java.lang.Override
@@ -115,12 +127,18 @@ public interface _FinalStage {
         _FinalStage name(Optional<GuardianFactorNameEnum> name);
 
         _FinalStage name(GuardianFactorNameEnum name);
+
+        _FinalStage settings(Optional<GuardianFactorSettings> settings);
+
+        _FinalStage settings(GuardianFactorSettings settings);
     }
 
     @JsonIgnoreProperties(ignoreUnknown = true)
     public static final class Builder implements EnabledStage, _FinalStage {
         private boolean enabled;
 
+        private Optional<GuardianFactorSettings> settings = Optional.empty();
+
         private Optional<GuardianFactorNameEnum> name = Optional.empty();
 
         private Optional<Boolean> trialExpired = Optional.empty();
@@ -135,6 +153,7 @@ public Builder from(GuardianFactor other) {
             enabled(other.getEnabled());
             trialExpired(other.getTrialExpired());
             name(other.getName());
+            settings(other.getSettings());
             return this;
         }
 
@@ -149,6 +168,19 @@ public _FinalStage enabled(boolean enabled) {
             return this;
         }
 
+        @java.lang.Override
+        public _FinalStage settings(GuardianFactorSettings settings) {
+            this.settings = Optional.ofNullable(settings);
+            return this;
+        }
+
+        @java.lang.Override
+        @JsonSetter(value = "settings", nulls = Nulls.SKIP)
+        public _FinalStage settings(Optional<GuardianFactorSettings> settings) {
+            this.settings = settings;
+            return this;
+        }
+
         @java.lang.Override
         public _FinalStage name(GuardianFactorNameEnum name) {
             this.name = Optional.ofNullable(name);
@@ -184,7 +216,7 @@ public _FinalStage trialExpired(Optional<Boolean> trialExpired) {
 
         @java.lang.Override
         public GuardianFactor build() {
-            return new GuardianFactor(enabled, trialExpired, name, additionalProperties);
+            return new GuardianFactor(enabled, trialExpired, name, settings, additionalProperties);
         }
 
         @java.lang.Override
diff --git a/src/main/java/com/auth0/client/mgmt/types/GuardianFactorSettings.java b/src/main/java/com/auth0/client/mgmt/types/GuardianFactorSettings.java
new file mode 100644
index 00000000..f09b823d
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/GuardianFactorSettings.java
@@ -0,0 +1,142 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Optional;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = GuardianFactorSettings.Builder.class)
+public final class GuardianFactorSettings {
+    private final Optional<Integer> otpLength;
+
+    private final Optional<Integer> otpExpirationTime;
+
+    private final Map<String, Object> additionalProperties;
+
+    private GuardianFactorSettings(
+            Optional<Integer> otpLength,
+            Optional<Integer> otpExpirationTime,
+            Map<String, Object> additionalProperties) {
+        this.otpLength = otpLength;
+        this.otpExpirationTime = otpExpirationTime;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return The length of the OTP code.
+     */
+    @JsonProperty("otp_length")
+    public Optional<Integer> getOtpLength() {
+        return otpLength;
+    }
+
+    /**
+     * @return The OTP expiration time in seconds.
+     */
+    @JsonProperty("otp_expiration_time")
+    public Optional<Integer> getOtpExpirationTime() {
+        return otpExpirationTime;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof GuardianFactorSettings && equalTo((GuardianFactorSettings) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(GuardianFactorSettings other) {
+        return otpLength.equals(other.otpLength) && otpExpirationTime.equals(other.otpExpirationTime);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.otpLength, this.otpExpirationTime);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder {
+        private Optional<Integer> otpLength = Optional.empty();
+
+        private Optional<Integer> otpExpirationTime = Optional.empty();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        public Builder from(GuardianFactorSettings other) {
+            otpLength(other.getOtpLength());
+            otpExpirationTime(other.getOtpExpirationTime());
+            return this;
+        }
+
+        /**
+         * <p>The length of the OTP code.</p>
+         */
+        @JsonSetter(value = "otp_length", nulls = Nulls.SKIP)
+        public Builder otpLength(Optional<Integer> otpLength) {
+            this.otpLength = otpLength;
+            return this;
+        }
+
+        public Builder otpLength(Integer otpLength) {
+            this.otpLength = Optional.ofNullable(otpLength);
+            return this;
+        }
+
+        /**
+         * <p>The OTP expiration time in seconds.</p>
+         */
+        @JsonSetter(value = "otp_expiration_time", nulls = Nulls.SKIP)
+        public Builder otpExpirationTime(Optional<Integer> otpExpirationTime) {
+            this.otpExpirationTime = otpExpirationTime;
+            return this;
+        }
+
+        public Builder otpExpirationTime(Integer otpExpirationTime) {
+            this.otpExpirationTime = Optional.ofNullable(otpExpirationTime);
+            return this;
+        }
+
+        public GuardianFactorSettings build() {
+            return new GuardianFactorSettings(otpLength, otpExpirationTime, additionalProperties);
+        }
+
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/ListAgentsRequestParameters.java b/src/main/java/com/auth0/client/mgmt/types/ListAgentsRequestParameters.java
new file mode 100644
index 00000000..280d717d
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/ListAgentsRequestParameters.java
@@ -0,0 +1,203 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.NullableNonemptyFilter;
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.core.OptionalNullable;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Optional;
+import org.jetbrains.annotations.Nullable;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = ListAgentsRequestParameters.Builder.class)
+public final class ListAgentsRequestParameters {
+    private final OptionalNullable<String> from;
+
+    private final OptionalNullable<Integer> take;
+
+    private final Map<String, Object> additionalProperties;
+
+    private ListAgentsRequestParameters(
+            OptionalNullable<String> from, OptionalNullable<Integer> take, Map<String, Object> additionalProperties) {
+        this.from = from;
+        this.take = take;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return Optional Id from which to start selection.
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("from")
+    public OptionalNullable<String> getFrom() {
+        if (from == null) {
+            return OptionalNullable.absent();
+        }
+        return from;
+    }
+
+    /**
+     * @return Number of results per page. Defaults to 50.
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("take")
+    public OptionalNullable<Integer> getTake() {
+        if (take == null) {
+            return OptionalNullable.absent();
+        }
+        return take;
+    }
+
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("from")
+    private OptionalNullable<String> _getFrom() {
+        return from;
+    }
+
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("take")
+    private OptionalNullable<Integer> _getTake() {
+        return take;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof ListAgentsRequestParameters && equalTo((ListAgentsRequestParameters) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(ListAgentsRequestParameters other) {
+        return from.equals(other.from) && take.equals(other.take);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.from, this.take);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder {
+        private OptionalNullable<String> from = OptionalNullable.absent();
+
+        private OptionalNullable<Integer> take = OptionalNullable.absent();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        public Builder from(ListAgentsRequestParameters other) {
+            from(other.getFrom());
+            take(other.getTake());
+            return this;
+        }
+
+        /**
+         * <p>Optional Id from which to start selection.</p>
+         */
+        @JsonSetter(value = "from", nulls = Nulls.SKIP)
+        public Builder from(@Nullable OptionalNullable<String> from) {
+            this.from = from;
+            return this;
+        }
+
+        public Builder from(String from) {
+            this.from = OptionalNullable.of(from);
+            return this;
+        }
+
+        public Builder from(Optional<String> from) {
+            if (from.isPresent()) {
+                this.from = OptionalNullable.of(from.get());
+            } else {
+                this.from = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder from(com.auth0.client.mgmt.core.Nullable<String> from) {
+            if (from.isNull()) {
+                this.from = OptionalNullable.ofNull();
+            } else if (from.isEmpty()) {
+                this.from = OptionalNullable.absent();
+            } else {
+                this.from = OptionalNullable.of(from.get());
+            }
+            return this;
+        }
+
+        /**
+         * <p>Number of results per page. Defaults to 50.</p>
+         */
+        @JsonSetter(value = "take", nulls = Nulls.SKIP)
+        public Builder take(@Nullable OptionalNullable<Integer> take) {
+            this.take = take;
+            return this;
+        }
+
+        public Builder take(Integer take) {
+            this.take = OptionalNullable.of(take);
+            return this;
+        }
+
+        public Builder take(Optional<Integer> take) {
+            if (take.isPresent()) {
+                this.take = OptionalNullable.of(take.get());
+            } else {
+                this.take = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder take(com.auth0.client.mgmt.core.Nullable<Integer> take) {
+            if (take.isNull()) {
+                this.take = OptionalNullable.ofNull();
+            } else if (take.isEmpty()) {
+                this.take = OptionalNullable.absent();
+            } else {
+                this.take = OptionalNullable.of(take.get());
+            }
+            return this;
+        }
+
+        public ListAgentsRequestParameters build() {
+            return new ListAgentsRequestParameters(from, take, additionalProperties);
+        }
+
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/ListAgentsResponseContent.java b/src/main/java/com/auth0/client/mgmt/types/ListAgentsResponseContent.java
new file mode 100644
index 00000000..3ae3bd04
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/ListAgentsResponseContent.java
@@ -0,0 +1,146 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Optional;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = ListAgentsResponseContent.Builder.class)
+public final class ListAgentsResponseContent {
+    private final List<AgentResponseContent> agents;
+
+    private final Optional<String> next;
+
+    private final Map<String, Object> additionalProperties;
+
+    private ListAgentsResponseContent(
+            List<AgentResponseContent> agents, Optional<String> next, Map<String, Object> additionalProperties) {
+        this.agents = agents;
+        this.next = next;
+        this.additionalProperties = additionalProperties;
+    }
+
+    @JsonProperty("agents")
+    public List<AgentResponseContent> getAgents() {
+        return agents;
+    }
+
+    /**
+     * @return A cursor to be used as the &quot;from&quot; query parameter for the next page of results. Omitted when there are no further results.
+     */
+    @JsonProperty("next")
+    public Optional<String> getNext() {
+        return next;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof ListAgentsResponseContent && equalTo((ListAgentsResponseContent) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(ListAgentsResponseContent other) {
+        return agents.equals(other.agents) && next.equals(other.next);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.agents, this.next);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder {
+        private List<AgentResponseContent> agents = new ArrayList<>();
+
+        private Optional<String> next = Optional.empty();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        public Builder from(ListAgentsResponseContent other) {
+            agents(other.getAgents());
+            next(other.getNext());
+            return this;
+        }
+
+        @JsonSetter(value = "agents", nulls = Nulls.SKIP)
+        public Builder agents(List<AgentResponseContent> agents) {
+            this.agents.clear();
+            if (agents != null) {
+                this.agents.addAll(agents);
+            }
+            return this;
+        }
+
+        public Builder addAgents(AgentResponseContent agents) {
+            this.agents.add(agents);
+            return this;
+        }
+
+        public Builder addAllAgents(List<AgentResponseContent> agents) {
+            if (agents != null) {
+                this.agents.addAll(agents);
+            }
+            return this;
+        }
+
+        /**
+         * <p>A cursor to be used as the &quot;from&quot; query parameter for the next page of results. Omitted when there are no further results.</p>
+         */
+        @JsonSetter(value = "next", nulls = Nulls.SKIP)
+        public Builder next(Optional<String> next) {
+            this.next = next;
+            return this;
+        }
+
+        public Builder next(String next) {
+            this.next = Optional.ofNullable(next);
+            return this;
+        }
+
+        public ListAgentsResponseContent build() {
+            return new ListAgentsResponseContent(agents, next, additionalProperties);
+        }
+
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/ListClientGrantsRequestParameters.java b/src/main/java/com/auth0/client/mgmt/types/ListClientGrantsRequestParameters.java
index 05bdd943..912aba78 100644
--- a/src/main/java/com/auth0/client/mgmt/types/ListClientGrantsRequestParameters.java
+++ b/src/main/java/com/auth0/client/mgmt/types/ListClientGrantsRequestParameters.java
@@ -23,6 +23,8 @@
 @JsonInclude(JsonInclude.Include.NON_ABSENT)
 @JsonDeserialize(builder = ListClientGrantsRequestParameters.Builder.class)
 public final class ListClientGrantsRequestParameters {
+    private final OptionalNullable<Boolean> includeTotals;
+
     private final OptionalNullable<String> from;
 
     private final OptionalNullable<Integer> take;
@@ -40,6 +42,7 @@ public final class ListClientGrantsRequestParameters {
     private final Map<String, Object> additionalProperties;
 
     private ListClientGrantsRequestParameters(
+            OptionalNullable<Boolean> includeTotals,
             OptionalNullable<String> from,
             OptionalNullable<Integer> take,
             OptionalNullable<String> audience,
@@ -48,6 +51,7 @@ private ListClientGrantsRequestParameters(
             OptionalNullable<ClientGrantSubjectTypeEnum> subjectType,
             OptionalNullable<ClientGrantDefaultForEnum> defaultFor,
             Map<String, Object> additionalProperties) {
+        this.includeTotals = includeTotals;
         this.from = from;
         this.take = take;
         this.audience = audience;
@@ -58,6 +62,18 @@ private ListClientGrantsRequestParameters(
         this.additionalProperties = additionalProperties;
     }
 
+    /**
+     * @return Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    public OptionalNullable<Boolean> getIncludeTotals() {
+        if (includeTotals == null) {
+            return OptionalNullable.absent();
+        }
+        return includeTotals;
+    }
+
     /**
      * @return Optional Id from which to start selection.
      */
@@ -142,6 +158,12 @@ public OptionalNullable<ClientGrantDefaultForEnum> getDefaultFor() {
         return defaultFor;
     }
 
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    private OptionalNullable<Boolean> _getIncludeTotals() {
+        return includeTotals;
+    }
+
     @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
     @JsonProperty("from")
     private OptionalNullable<String> _getFrom() {
@@ -196,7 +218,8 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(ListClientGrantsRequestParameters other) {
-        return from.equals(other.from)
+        return includeTotals.equals(other.includeTotals)
+                && from.equals(other.from)
                 && take.equals(other.take)
                 && audience.equals(other.audience)
                 && clientId.equals(other.clientId)
@@ -208,6 +231,7 @@ private boolean equalTo(ListClientGrantsRequestParameters other) {
     @java.lang.Override
     public int hashCode() {
         return Objects.hash(
+                this.includeTotals,
                 this.from,
                 this.take,
                 this.audience,
@@ -228,6 +252,8 @@ public static Builder builder() {
 
     @JsonIgnoreProperties(ignoreUnknown = true)
     public static final class Builder {
+        private OptionalNullable<Boolean> includeTotals = OptionalNullable.absent();
+
         private OptionalNullable<String> from = OptionalNullable.absent();
 
         private OptionalNullable<Integer> take = OptionalNullable.absent();
@@ -248,6 +274,7 @@ public static final class Builder {
         private Builder() {}
 
         public Builder from(ListClientGrantsRequestParameters other) {
+            includeTotals(other.getIncludeTotals());
             from(other.getFrom());
             take(other.getTake());
             audience(other.getAudience());
@@ -258,6 +285,40 @@ public Builder from(ListClientGrantsRequestParameters other) {
             return this;
         }
 
+        /**
+         * <p>Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).</p>
+         */
+        @JsonSetter(value = "include_totals", nulls = Nulls.SKIP)
+        public Builder includeTotals(@Nullable OptionalNullable<Boolean> includeTotals) {
+            this.includeTotals = includeTotals;
+            return this;
+        }
+
+        public Builder includeTotals(Boolean includeTotals) {
+            this.includeTotals = OptionalNullable.of(includeTotals);
+            return this;
+        }
+
+        public Builder includeTotals(Optional<Boolean> includeTotals) {
+            if (includeTotals.isPresent()) {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            } else {
+                this.includeTotals = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder includeTotals(com.auth0.client.mgmt.core.Nullable<Boolean> includeTotals) {
+            if (includeTotals.isNull()) {
+                this.includeTotals = OptionalNullable.ofNull();
+            } else if (includeTotals.isEmpty()) {
+                this.includeTotals = OptionalNullable.absent();
+            } else {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            }
+            return this;
+        }
+
         /**
          * <p>Optional Id from which to start selection.</p>
          */
@@ -498,6 +559,7 @@ public Builder defaultFor(com.auth0.client.mgmt.core.Nullable<ClientGrantDefault
 
         public ListClientGrantsRequestParameters build() {
             return new ListClientGrantsRequestParameters(
+                    includeTotals,
                     from,
                     take,
                     audience,
diff --git a/src/main/java/com/auth0/client/mgmt/types/ListConnectionsQueryParameters.java b/src/main/java/com/auth0/client/mgmt/types/ListConnectionsQueryParameters.java
index c648b049..f512ce7b 100644
--- a/src/main/java/com/auth0/client/mgmt/types/ListConnectionsQueryParameters.java
+++ b/src/main/java/com/auth0/client/mgmt/types/ListConnectionsQueryParameters.java
@@ -28,6 +28,8 @@
 public final class ListConnectionsQueryParameters {
     private final Optional<List<ConnectionStrategyEnum>> strategy;
 
+    private final OptionalNullable<Boolean> includeTotals;
+
     private final OptionalNullable<String> from;
 
     private final OptionalNullable<Integer> take;
@@ -42,6 +44,7 @@ public final class ListConnectionsQueryParameters {
 
     private ListConnectionsQueryParameters(
             Optional<List<ConnectionStrategyEnum>> strategy,
+            OptionalNullable<Boolean> includeTotals,
             OptionalNullable<String> from,
             OptionalNullable<Integer> take,
             OptionalNullable<String> name,
@@ -49,6 +52,7 @@ private ListConnectionsQueryParameters(
             OptionalNullable<Boolean> includeFields,
             Map<String, Object> additionalProperties) {
         this.strategy = strategy;
+        this.includeTotals = includeTotals;
         this.from = from;
         this.take = take;
         this.name = name;
@@ -68,6 +72,18 @@ public Optional<List<ConnectionStrategyEnum>> getStrategy() {
         return strategy;
     }
 
+    /**
+     * @return true if a query summary must be included in the result, false otherwise. Not returned when using checkpoint pagination. Default <code>false</code>.
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    public OptionalNullable<Boolean> getIncludeTotals() {
+        if (includeTotals == null) {
+            return OptionalNullable.absent();
+        }
+        return includeTotals;
+    }
+
     /**
      * @return Optional Id from which to start selection.
      */
@@ -134,6 +150,12 @@ private Optional<List<ConnectionStrategyEnum>> _getStrategy() {
         return strategy;
     }
 
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    private OptionalNullable<Boolean> _getIncludeTotals() {
+        return includeTotals;
+    }
+
     @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
     @JsonProperty("from")
     private OptionalNullable<String> _getFrom() {
@@ -177,6 +199,7 @@ public Map<String, Object> getAdditionalProperties() {
 
     private boolean equalTo(ListConnectionsQueryParameters other) {
         return strategy.equals(other.strategy)
+                && includeTotals.equals(other.includeTotals)
                 && from.equals(other.from)
                 && take.equals(other.take)
                 && name.equals(other.name)
@@ -186,7 +209,8 @@ private boolean equalTo(ListConnectionsQueryParameters other) {
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.strategy, this.from, this.take, this.name, this.fields, this.includeFields);
+        return Objects.hash(
+                this.strategy, this.includeTotals, this.from, this.take, this.name, this.fields, this.includeFields);
     }
 
     @java.lang.Override
@@ -202,6 +226,8 @@ public static Builder builder() {
     public static final class Builder {
         private Optional<List<ConnectionStrategyEnum>> strategy = Optional.empty();
 
+        private OptionalNullable<Boolean> includeTotals = OptionalNullable.absent();
+
         private OptionalNullable<String> from = OptionalNullable.absent();
 
         private OptionalNullable<Integer> take = OptionalNullable.absent();
@@ -219,6 +245,7 @@ private Builder() {}
 
         public Builder from(ListConnectionsQueryParameters other) {
             strategy(other.getStrategy());
+            includeTotals(other.getIncludeTotals());
             from(other.getFrom());
             take(other.getTake());
             name(other.getName());
@@ -257,6 +284,40 @@ public Builder strategy(ConnectionStrategyEnum strategy) {
             return this;
         }
 
+        /**
+         * <p>true if a query summary must be included in the result, false otherwise. Not returned when using checkpoint pagination. Default <code>false</code>.</p>
+         */
+        @JsonSetter(value = "include_totals", nulls = Nulls.SKIP)
+        public Builder includeTotals(@Nullable OptionalNullable<Boolean> includeTotals) {
+            this.includeTotals = includeTotals;
+            return this;
+        }
+
+        public Builder includeTotals(Boolean includeTotals) {
+            this.includeTotals = OptionalNullable.of(includeTotals);
+            return this;
+        }
+
+        public Builder includeTotals(Optional<Boolean> includeTotals) {
+            if (includeTotals.isPresent()) {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            } else {
+                this.includeTotals = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder includeTotals(com.auth0.client.mgmt.core.Nullable<Boolean> includeTotals) {
+            if (includeTotals.isNull()) {
+                this.includeTotals = OptionalNullable.ofNull();
+            } else if (includeTotals.isEmpty()) {
+                this.includeTotals = OptionalNullable.absent();
+            } else {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            }
+            return this;
+        }
+
         /**
          * <p>Optional Id from which to start selection.</p>
          */
@@ -429,7 +490,7 @@ public Builder includeFields(com.auth0.client.mgmt.core.Nullable<Boolean> includ
 
         public ListConnectionsQueryParameters build() {
             return new ListConnectionsQueryParameters(
-                    strategy, from, take, name, fields, includeFields, additionalProperties);
+                    strategy, includeTotals, from, take, name, fields, includeFields, additionalProperties);
         }
 
         public Builder additionalProperty(String key, Object value) {
diff --git a/src/main/java/com/auth0/client/mgmt/types/ListEventStreamDeliveriesResponseContent.java b/src/main/java/com/auth0/client/mgmt/types/ListEventStreamDeliveriesResponseContent.java
new file mode 100644
index 00000000..10721e0a
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/ListEventStreamDeliveriesResponseContent.java
@@ -0,0 +1,153 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Optional;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = ListEventStreamDeliveriesResponseContent.Builder.class)
+public final class ListEventStreamDeliveriesResponseContent {
+    private final List<EventStreamDelivery> deliveries;
+
+    private final Optional<String> next;
+
+    private final Map<String, Object> additionalProperties;
+
+    private ListEventStreamDeliveriesResponseContent(
+            List<EventStreamDelivery> deliveries, Optional<String> next, Map<String, Object> additionalProperties) {
+        this.deliveries = deliveries;
+        this.next = next;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return List of event stream deliveries
+     */
+    @JsonProperty("deliveries")
+    public List<EventStreamDelivery> getDeliveries() {
+        return deliveries;
+    }
+
+    /**
+     * @return The cursor to be used as the &quot;from&quot; query parameter for the next page of results.
+     */
+    @JsonProperty("next")
+    public Optional<String> getNext() {
+        return next;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof ListEventStreamDeliveriesResponseContent
+                && equalTo((ListEventStreamDeliveriesResponseContent) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(ListEventStreamDeliveriesResponseContent other) {
+        return deliveries.equals(other.deliveries) && next.equals(other.next);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.deliveries, this.next);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder {
+        private List<EventStreamDelivery> deliveries = new ArrayList<>();
+
+        private Optional<String> next = Optional.empty();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        public Builder from(ListEventStreamDeliveriesResponseContent other) {
+            deliveries(other.getDeliveries());
+            next(other.getNext());
+            return this;
+        }
+
+        /**
+         * <p>List of event stream deliveries</p>
+         */
+        @JsonSetter(value = "deliveries", nulls = Nulls.SKIP)
+        public Builder deliveries(List<EventStreamDelivery> deliveries) {
+            this.deliveries.clear();
+            if (deliveries != null) {
+                this.deliveries.addAll(deliveries);
+            }
+            return this;
+        }
+
+        public Builder addDeliveries(EventStreamDelivery deliveries) {
+            this.deliveries.add(deliveries);
+            return this;
+        }
+
+        public Builder addAllDeliveries(List<EventStreamDelivery> deliveries) {
+            if (deliveries != null) {
+                this.deliveries.addAll(deliveries);
+            }
+            return this;
+        }
+
+        /**
+         * <p>The cursor to be used as the &quot;from&quot; query parameter for the next page of results.</p>
+         */
+        @JsonSetter(value = "next", nulls = Nulls.SKIP)
+        public Builder next(Optional<String> next) {
+            this.next = next;
+            return this;
+        }
+
+        public Builder next(String next) {
+            this.next = Optional.ofNullable(next);
+            return this;
+        }
+
+        public ListEventStreamDeliveriesResponseContent build() {
+            return new ListEventStreamDeliveriesResponseContent(deliveries, next, additionalProperties);
+        }
+
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/ListGroupsRequestParameters.java b/src/main/java/com/auth0/client/mgmt/types/ListGroupsRequestParameters.java
index a3adbbc7..0bb4f59f 100644
--- a/src/main/java/com/auth0/client/mgmt/types/ListGroupsRequestParameters.java
+++ b/src/main/java/com/auth0/client/mgmt/types/ListGroupsRequestParameters.java
@@ -35,6 +35,8 @@ public final class ListGroupsRequestParameters {
 
     private final OptionalNullable<Boolean> includeFields;
 
+    private final OptionalNullable<Boolean> includeTotals;
+
     private final OptionalNullable<String> from;
 
     private final OptionalNullable<Integer> take;
@@ -48,6 +50,7 @@ private ListGroupsRequestParameters(
             OptionalNullable<String> search,
             OptionalNullable<String> fields,
             OptionalNullable<Boolean> includeFields,
+            OptionalNullable<Boolean> includeTotals,
             OptionalNullable<String> from,
             OptionalNullable<Integer> take,
             Map<String, Object> additionalProperties) {
@@ -57,6 +60,7 @@ private ListGroupsRequestParameters(
         this.search = search;
         this.fields = fields;
         this.includeFields = includeFields;
+        this.includeTotals = includeTotals;
         this.from = from;
         this.take = take;
         this.additionalProperties = additionalProperties;
@@ -134,6 +138,18 @@ public OptionalNullable<Boolean> getIncludeFields() {
         return includeFields;
     }
 
+    /**
+     * @return Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    public OptionalNullable<Boolean> getIncludeTotals() {
+        if (includeTotals == null) {
+            return OptionalNullable.absent();
+        }
+        return includeTotals;
+    }
+
     /**
      * @return Optional Id from which to start selection.
      */
@@ -194,6 +210,12 @@ private OptionalNullable<Boolean> _getIncludeFields() {
         return includeFields;
     }
 
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    private OptionalNullable<Boolean> _getIncludeTotals() {
+        return includeTotals;
+    }
+
     @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
     @JsonProperty("from")
     private OptionalNullable<String> _getFrom() {
@@ -224,6 +246,7 @@ private boolean equalTo(ListGroupsRequestParameters other) {
                 && search.equals(other.search)
                 && fields.equals(other.fields)
                 && includeFields.equals(other.includeFields)
+                && includeTotals.equals(other.includeTotals)
                 && from.equals(other.from)
                 && take.equals(other.take);
     }
@@ -237,6 +260,7 @@ public int hashCode() {
                 this.search,
                 this.fields,
                 this.includeFields,
+                this.includeTotals,
                 this.from,
                 this.take);
     }
@@ -264,6 +288,8 @@ public static final class Builder {
 
         private OptionalNullable<Boolean> includeFields = OptionalNullable.absent();
 
+        private OptionalNullable<Boolean> includeTotals = OptionalNullable.absent();
+
         private OptionalNullable<String> from = OptionalNullable.absent();
 
         private OptionalNullable<Integer> take = OptionalNullable.absent();
@@ -280,6 +306,7 @@ public Builder from(ListGroupsRequestParameters other) {
             search(other.getSearch());
             fields(other.getFields());
             includeFields(other.getIncludeFields());
+            includeTotals(other.getIncludeTotals());
             from(other.getFrom());
             take(other.getTake());
             return this;
@@ -489,6 +516,40 @@ public Builder includeFields(com.auth0.client.mgmt.core.Nullable<Boolean> includ
             return this;
         }
 
+        /**
+         * <p>Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).</p>
+         */
+        @JsonSetter(value = "include_totals", nulls = Nulls.SKIP)
+        public Builder includeTotals(@Nullable OptionalNullable<Boolean> includeTotals) {
+            this.includeTotals = includeTotals;
+            return this;
+        }
+
+        public Builder includeTotals(Boolean includeTotals) {
+            this.includeTotals = OptionalNullable.of(includeTotals);
+            return this;
+        }
+
+        public Builder includeTotals(Optional<Boolean> includeTotals) {
+            if (includeTotals.isPresent()) {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            } else {
+                this.includeTotals = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder includeTotals(com.auth0.client.mgmt.core.Nullable<Boolean> includeTotals) {
+            if (includeTotals.isNull()) {
+                this.includeTotals = OptionalNullable.ofNull();
+            } else if (includeTotals.isEmpty()) {
+                this.includeTotals = OptionalNullable.absent();
+            } else {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            }
+            return this;
+        }
+
         /**
          * <p>Optional Id from which to start selection.</p>
          */
@@ -559,7 +620,16 @@ public Builder take(com.auth0.client.mgmt.core.Nullable<Integer> take) {
 
         public ListGroupsRequestParameters build() {
             return new ListGroupsRequestParameters(
-                    connectionId, name, externalId, search, fields, includeFields, from, take, additionalProperties);
+                    connectionId,
+                    name,
+                    externalId,
+                    search,
+                    fields,
+                    includeFields,
+                    includeTotals,
+                    from,
+                    take,
+                    additionalProperties);
         }
 
         public Builder additionalProperty(String key, Object value) {
diff --git a/src/main/java/com/auth0/client/mgmt/types/ListOrganizationClientsResponseContent.java b/src/main/java/com/auth0/client/mgmt/types/ListOrganizationClientsResponseContent.java
new file mode 100644
index 00000000..85a89497
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/ListOrganizationClientsResponseContent.java
@@ -0,0 +1,153 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Optional;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = ListOrganizationClientsResponseContent.Builder.class)
+public final class ListOrganizationClientsResponseContent {
+    private final List<OrganizationClient> clients;
+
+    private final Optional<String> next;
+
+    private final Map<String, Object> additionalProperties;
+
+    private ListOrganizationClientsResponseContent(
+            List<OrganizationClient> clients, Optional<String> next, Map<String, Object> additionalProperties) {
+        this.clients = clients;
+        this.next = next;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return The list of clients associated with the organization.
+     */
+    @JsonProperty("clients")
+    public List<OrganizationClient> getClients() {
+        return clients;
+    }
+
+    /**
+     * @return An opaque token that, when present, can be passed as the <code>from</code> query parameter to retrieve the next page of results.
+     */
+    @JsonProperty("next")
+    public Optional<String> getNext() {
+        return next;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof ListOrganizationClientsResponseContent
+                && equalTo((ListOrganizationClientsResponseContent) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(ListOrganizationClientsResponseContent other) {
+        return clients.equals(other.clients) && next.equals(other.next);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.clients, this.next);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder {
+        private List<OrganizationClient> clients = new ArrayList<>();
+
+        private Optional<String> next = Optional.empty();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        public Builder from(ListOrganizationClientsResponseContent other) {
+            clients(other.getClients());
+            next(other.getNext());
+            return this;
+        }
+
+        /**
+         * <p>The list of clients associated with the organization.</p>
+         */
+        @JsonSetter(value = "clients", nulls = Nulls.SKIP)
+        public Builder clients(List<OrganizationClient> clients) {
+            this.clients.clear();
+            if (clients != null) {
+                this.clients.addAll(clients);
+            }
+            return this;
+        }
+
+        public Builder addClients(OrganizationClient clients) {
+            this.clients.add(clients);
+            return this;
+        }
+
+        public Builder addAllClients(List<OrganizationClient> clients) {
+            if (clients != null) {
+                this.clients.addAll(clients);
+            }
+            return this;
+        }
+
+        /**
+         * <p>An opaque token that, when present, can be passed as the <code>from</code> query parameter to retrieve the next page of results.</p>
+         */
+        @JsonSetter(value = "next", nulls = Nulls.SKIP)
+        public Builder next(Optional<String> next) {
+            this.next = next;
+            return this;
+        }
+
+        public Builder next(String next) {
+            this.next = Optional.ofNullable(next);
+            return this;
+        }
+
+        public ListOrganizationClientsResponseContent build() {
+            return new ListOrganizationClientsResponseContent(clients, next, additionalProperties);
+        }
+
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/ListOrganizationRoleGroupsResponseContent.java b/src/main/java/com/auth0/client/mgmt/types/ListOrganizationRoleGroupsResponseContent.java
new file mode 100644
index 00000000..98315592
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/ListOrganizationRoleGroupsResponseContent.java
@@ -0,0 +1,147 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Optional;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = ListOrganizationRoleGroupsResponseContent.Builder.class)
+public final class ListOrganizationRoleGroupsResponseContent {
+    private final List<RoleGroup> groups;
+
+    private final Optional<String> next;
+
+    private final Map<String, Object> additionalProperties;
+
+    private ListOrganizationRoleGroupsResponseContent(
+            List<RoleGroup> groups, Optional<String> next, Map<String, Object> additionalProperties) {
+        this.groups = groups;
+        this.next = next;
+        this.additionalProperties = additionalProperties;
+    }
+
+    @JsonProperty("groups")
+    public List<RoleGroup> getGroups() {
+        return groups;
+    }
+
+    /**
+     * @return A cursor to be used as the &quot;from&quot; query parameter for the next page of results.
+     */
+    @JsonProperty("next")
+    public Optional<String> getNext() {
+        return next;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof ListOrganizationRoleGroupsResponseContent
+                && equalTo((ListOrganizationRoleGroupsResponseContent) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(ListOrganizationRoleGroupsResponseContent other) {
+        return groups.equals(other.groups) && next.equals(other.next);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.groups, this.next);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder {
+        private List<RoleGroup> groups = new ArrayList<>();
+
+        private Optional<String> next = Optional.empty();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        public Builder from(ListOrganizationRoleGroupsResponseContent other) {
+            groups(other.getGroups());
+            next(other.getNext());
+            return this;
+        }
+
+        @JsonSetter(value = "groups", nulls = Nulls.SKIP)
+        public Builder groups(List<RoleGroup> groups) {
+            this.groups.clear();
+            if (groups != null) {
+                this.groups.addAll(groups);
+            }
+            return this;
+        }
+
+        public Builder addGroups(RoleGroup groups) {
+            this.groups.add(groups);
+            return this;
+        }
+
+        public Builder addAllGroups(List<RoleGroup> groups) {
+            if (groups != null) {
+                this.groups.addAll(groups);
+            }
+            return this;
+        }
+
+        /**
+         * <p>A cursor to be used as the &quot;from&quot; query parameter for the next page of results.</p>
+         */
+        @JsonSetter(value = "next", nulls = Nulls.SKIP)
+        public Builder next(Optional<String> next) {
+            this.next = next;
+            return this;
+        }
+
+        public Builder next(String next) {
+            this.next = Optional.ofNullable(next);
+            return this;
+        }
+
+        public ListOrganizationRoleGroupsResponseContent build() {
+            return new ListOrganizationRoleGroupsResponseContent(groups, next, additionalProperties);
+        }
+
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/ListOrganizationsRequestParameters.java b/src/main/java/com/auth0/client/mgmt/types/ListOrganizationsRequestParameters.java
index c5b6cabd..8a8e0475 100644
--- a/src/main/java/com/auth0/client/mgmt/types/ListOrganizationsRequestParameters.java
+++ b/src/main/java/com/auth0/client/mgmt/types/ListOrganizationsRequestParameters.java
@@ -23,25 +23,45 @@
 @JsonInclude(JsonInclude.Include.NON_ABSENT)
 @JsonDeserialize(builder = ListOrganizationsRequestParameters.Builder.class)
 public final class ListOrganizationsRequestParameters {
+    private final OptionalNullable<Boolean> includeTotals;
+
     private final OptionalNullable<String> from;
 
     private final OptionalNullable<Integer> take;
 
     private final OptionalNullable<String> sort;
 
+    private final OptionalNullable<String> includeClientAssociationFor;
+
     private final Map<String, Object> additionalProperties;
 
     private ListOrganizationsRequestParameters(
+            OptionalNullable<Boolean> includeTotals,
             OptionalNullable<String> from,
             OptionalNullable<Integer> take,
             OptionalNullable<String> sort,
+            OptionalNullable<String> includeClientAssociationFor,
             Map<String, Object> additionalProperties) {
+        this.includeTotals = includeTotals;
         this.from = from;
         this.take = take;
         this.sort = sort;
+        this.includeClientAssociationFor = includeClientAssociationFor;
         this.additionalProperties = additionalProperties;
     }
 
+    /**
+     * @return Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    public OptionalNullable<Boolean> getIncludeTotals() {
+        if (includeTotals == null) {
+            return OptionalNullable.absent();
+        }
+        return includeTotals;
+    }
+
     /**
      * @return Optional Id from which to start selection.
      */
@@ -78,6 +98,24 @@ public OptionalNullable<String> getSort() {
         return sort;
     }
 
+    /**
+     * @return Client ID. When set, each returned organization that has an association with this client gains a <code>client</code> object describing it; organizations without one omit the field.
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_client_association_for")
+    public OptionalNullable<String> getIncludeClientAssociationFor() {
+        if (includeClientAssociationFor == null) {
+            return OptionalNullable.absent();
+        }
+        return includeClientAssociationFor;
+    }
+
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    private OptionalNullable<Boolean> _getIncludeTotals() {
+        return includeTotals;
+    }
+
     @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
     @JsonProperty("from")
     private OptionalNullable<String> _getFrom() {
@@ -96,6 +134,12 @@ private OptionalNullable<String> _getSort() {
         return sort;
     }
 
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_client_association_for")
+    private OptionalNullable<String> _getIncludeClientAssociationFor() {
+        return includeClientAssociationFor;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -109,12 +153,16 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(ListOrganizationsRequestParameters other) {
-        return from.equals(other.from) && take.equals(other.take) && sort.equals(other.sort);
+        return includeTotals.equals(other.includeTotals)
+                && from.equals(other.from)
+                && take.equals(other.take)
+                && sort.equals(other.sort)
+                && includeClientAssociationFor.equals(other.includeClientAssociationFor);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.from, this.take, this.sort);
+        return Objects.hash(this.includeTotals, this.from, this.take, this.sort, this.includeClientAssociationFor);
     }
 
     @java.lang.Override
@@ -128,21 +176,61 @@ public static Builder builder() {
 
     @JsonIgnoreProperties(ignoreUnknown = true)
     public static final class Builder {
+        private OptionalNullable<Boolean> includeTotals = OptionalNullable.absent();
+
         private OptionalNullable<String> from = OptionalNullable.absent();
 
         private OptionalNullable<Integer> take = OptionalNullable.absent();
 
         private OptionalNullable<String> sort = OptionalNullable.absent();
 
+        private OptionalNullable<String> includeClientAssociationFor = OptionalNullable.absent();
+
         @JsonAnySetter
         private Map<String, Object> additionalProperties = new HashMap<>();
 
         private Builder() {}
 
         public Builder from(ListOrganizationsRequestParameters other) {
+            includeTotals(other.getIncludeTotals());
             from(other.getFrom());
             take(other.getTake());
             sort(other.getSort());
+            includeClientAssociationFor(other.getIncludeClientAssociationFor());
+            return this;
+        }
+
+        /**
+         * <p>Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).</p>
+         */
+        @JsonSetter(value = "include_totals", nulls = Nulls.SKIP)
+        public Builder includeTotals(@Nullable OptionalNullable<Boolean> includeTotals) {
+            this.includeTotals = includeTotals;
+            return this;
+        }
+
+        public Builder includeTotals(Boolean includeTotals) {
+            this.includeTotals = OptionalNullable.of(includeTotals);
+            return this;
+        }
+
+        public Builder includeTotals(Optional<Boolean> includeTotals) {
+            if (includeTotals.isPresent()) {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            } else {
+                this.includeTotals = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder includeTotals(com.auth0.client.mgmt.core.Nullable<Boolean> includeTotals) {
+            if (includeTotals.isNull()) {
+                this.includeTotals = OptionalNullable.ofNull();
+            } else if (includeTotals.isEmpty()) {
+                this.includeTotals = OptionalNullable.absent();
+            } else {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            }
             return this;
         }
 
@@ -248,8 +336,44 @@ public Builder sort(com.auth0.client.mgmt.core.Nullable<String> sort) {
             return this;
         }
 
+        /**
+         * <p>Client ID. When set, each returned organization that has an association with this client gains a <code>client</code> object describing it; organizations without one omit the field.</p>
+         */
+        @JsonSetter(value = "include_client_association_for", nulls = Nulls.SKIP)
+        public Builder includeClientAssociationFor(@Nullable OptionalNullable<String> includeClientAssociationFor) {
+            this.includeClientAssociationFor = includeClientAssociationFor;
+            return this;
+        }
+
+        public Builder includeClientAssociationFor(String includeClientAssociationFor) {
+            this.includeClientAssociationFor = OptionalNullable.of(includeClientAssociationFor);
+            return this;
+        }
+
+        public Builder includeClientAssociationFor(Optional<String> includeClientAssociationFor) {
+            if (includeClientAssociationFor.isPresent()) {
+                this.includeClientAssociationFor = OptionalNullable.of(includeClientAssociationFor.get());
+            } else {
+                this.includeClientAssociationFor = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder includeClientAssociationFor(
+                com.auth0.client.mgmt.core.Nullable<String> includeClientAssociationFor) {
+            if (includeClientAssociationFor.isNull()) {
+                this.includeClientAssociationFor = OptionalNullable.ofNull();
+            } else if (includeClientAssociationFor.isEmpty()) {
+                this.includeClientAssociationFor = OptionalNullable.absent();
+            } else {
+                this.includeClientAssociationFor = OptionalNullable.of(includeClientAssociationFor.get());
+            }
+            return this;
+        }
+
         public ListOrganizationsRequestParameters build() {
-            return new ListOrganizationsRequestParameters(from, take, sort, additionalProperties);
+            return new ListOrganizationsRequestParameters(
+                    includeTotals, from, take, sort, includeClientAssociationFor, additionalProperties);
         }
 
         public Builder additionalProperty(String key, Object value) {
diff --git a/src/main/java/com/auth0/client/mgmt/types/ListRolesRequestParameters.java b/src/main/java/com/auth0/client/mgmt/types/ListRolesRequestParameters.java
index 70e0ac54..132160f3 100644
--- a/src/main/java/com/auth0/client/mgmt/types/ListRolesRequestParameters.java
+++ b/src/main/java/com/auth0/client/mgmt/types/ListRolesRequestParameters.java
@@ -31,6 +31,10 @@ public final class ListRolesRequestParameters {
 
     private final OptionalNullable<String> nameFilter;
 
+    private final OptionalNullable<RoleTypeEnum> type;
+
+    private final OptionalNullable<String> ownerId;
+
     private final Map<String, Object> additionalProperties;
 
     private ListRolesRequestParameters(
@@ -38,11 +42,15 @@ private ListRolesRequestParameters(
             OptionalNullable<Integer> page,
             OptionalNullable<Boolean> includeTotals,
             OptionalNullable<String> nameFilter,
+            OptionalNullable<RoleTypeEnum> type,
+            OptionalNullable<String> ownerId,
             Map<String, Object> additionalProperties) {
         this.perPage = perPage;
         this.page = page;
         this.includeTotals = includeTotals;
         this.nameFilter = nameFilter;
+        this.type = type;
+        this.ownerId = ownerId;
         this.additionalProperties = additionalProperties;
     }
 
@@ -94,6 +102,30 @@ public OptionalNullable<String> getNameFilter() {
         return nameFilter;
     }
 
+    /**
+     * @return Optional filter on the type of the role
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("type")
+    public OptionalNullable<RoleTypeEnum> getType() {
+        if (type == null) {
+            return OptionalNullable.absent();
+        }
+        return type;
+    }
+
+    /**
+     * @return Filter organization-level roles by owner ID. Required when type is &quot;organization&quot;.
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("owner_id")
+    public OptionalNullable<String> getOwnerId() {
+        if (ownerId == null) {
+            return OptionalNullable.absent();
+        }
+        return ownerId;
+    }
+
     @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
     @JsonProperty("per_page")
     private OptionalNullable<Integer> _getPerPage() {
@@ -118,6 +150,18 @@ private OptionalNullable<String> _getNameFilter() {
         return nameFilter;
     }
 
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("type")
+    private OptionalNullable<RoleTypeEnum> _getType() {
+        return type;
+    }
+
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("owner_id")
+    private OptionalNullable<String> _getOwnerId() {
+        return ownerId;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -133,12 +177,14 @@ private boolean equalTo(ListRolesRequestParameters other) {
         return perPage.equals(other.perPage)
                 && page.equals(other.page)
                 && includeTotals.equals(other.includeTotals)
-                && nameFilter.equals(other.nameFilter);
+                && nameFilter.equals(other.nameFilter)
+                && type.equals(other.type)
+                && ownerId.equals(other.ownerId);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.perPage, this.page, this.includeTotals, this.nameFilter);
+        return Objects.hash(this.perPage, this.page, this.includeTotals, this.nameFilter, this.type, this.ownerId);
     }
 
     @java.lang.Override
@@ -160,6 +206,10 @@ public static final class Builder {
 
         private OptionalNullable<String> nameFilter = OptionalNullable.absent();
 
+        private OptionalNullable<RoleTypeEnum> type = OptionalNullable.absent();
+
+        private OptionalNullable<String> ownerId = OptionalNullable.absent();
+
         @JsonAnySetter
         private Map<String, Object> additionalProperties = new HashMap<>();
 
@@ -170,6 +220,8 @@ public Builder from(ListRolesRequestParameters other) {
             page(other.getPage());
             includeTotals(other.getIncludeTotals());
             nameFilter(other.getNameFilter());
+            type(other.getType());
+            ownerId(other.getOwnerId());
             return this;
         }
 
@@ -309,8 +361,77 @@ public Builder nameFilter(com.auth0.client.mgmt.core.Nullable<String> nameFilter
             return this;
         }
 
+        /**
+         * <p>Optional filter on the type of the role</p>
+         */
+        @JsonSetter(value = "type", nulls = Nulls.SKIP)
+        public Builder type(@Nullable OptionalNullable<RoleTypeEnum> type) {
+            this.type = type;
+            return this;
+        }
+
+        public Builder type(RoleTypeEnum type) {
+            this.type = OptionalNullable.of(type);
+            return this;
+        }
+
+        public Builder type(Optional<RoleTypeEnum> type) {
+            if (type.isPresent()) {
+                this.type = OptionalNullable.of(type.get());
+            } else {
+                this.type = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder type(com.auth0.client.mgmt.core.Nullable<RoleTypeEnum> type) {
+            if (type.isNull()) {
+                this.type = OptionalNullable.ofNull();
+            } else if (type.isEmpty()) {
+                this.type = OptionalNullable.absent();
+            } else {
+                this.type = OptionalNullable.of(type.get());
+            }
+            return this;
+        }
+
+        /**
+         * <p>Filter organization-level roles by owner ID. Required when type is &quot;organization&quot;.</p>
+         */
+        @JsonSetter(value = "owner_id", nulls = Nulls.SKIP)
+        public Builder ownerId(@Nullable OptionalNullable<String> ownerId) {
+            this.ownerId = ownerId;
+            return this;
+        }
+
+        public Builder ownerId(String ownerId) {
+            this.ownerId = OptionalNullable.of(ownerId);
+            return this;
+        }
+
+        public Builder ownerId(Optional<String> ownerId) {
+            if (ownerId.isPresent()) {
+                this.ownerId = OptionalNullable.of(ownerId.get());
+            } else {
+                this.ownerId = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder ownerId(com.auth0.client.mgmt.core.Nullable<String> ownerId) {
+            if (ownerId.isNull()) {
+                this.ownerId = OptionalNullable.ofNull();
+            } else if (ownerId.isEmpty()) {
+                this.ownerId = OptionalNullable.absent();
+            } else {
+                this.ownerId = OptionalNullable.of(ownerId.get());
+            }
+            return this;
+        }
+
         public ListRolesRequestParameters build() {
-            return new ListRolesRequestParameters(perPage, page, includeTotals, nameFilter, additionalProperties);
+            return new ListRolesRequestParameters(
+                    perPage, page, includeTotals, nameFilter, type, ownerId, additionalProperties);
         }
 
         public Builder additionalProperty(String key, Object value) {
diff --git a/src/main/java/com/auth0/client/mgmt/types/NotFoundSchema.java b/src/main/java/com/auth0/client/mgmt/types/NotFoundSchema.java
new file mode 100644
index 00000000..02a474ca
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/NotFoundSchema.java
@@ -0,0 +1,163 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Objects;
+import org.jetbrains.annotations.NotNull;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = NotFoundSchema.Builder.class)
+public final class NotFoundSchema {
+    private final String message;
+
+    private final String statusCode;
+
+    private final NotFoundSchemaError error;
+
+    private final Map<String, Object> additionalProperties;
+
+    private NotFoundSchema(
+            String message, String statusCode, NotFoundSchemaError error, Map<String, Object> additionalProperties) {
+        this.message = message;
+        this.statusCode = statusCode;
+        this.error = error;
+        this.additionalProperties = additionalProperties;
+    }
+
+    @JsonProperty("message")
+    public String getMessage() {
+        return message;
+    }
+
+    @JsonProperty("statusCode")
+    public String getStatusCode() {
+        return statusCode;
+    }
+
+    @JsonProperty("error")
+    public NotFoundSchemaError getError() {
+        return error;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof NotFoundSchema && equalTo((NotFoundSchema) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(NotFoundSchema other) {
+        return message.equals(other.message) && statusCode.equals(other.statusCode) && error.equals(other.error);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.message, this.statusCode, this.error);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static MessageStage builder() {
+        return new Builder();
+    }
+
+    public interface MessageStage {
+        StatusCodeStage message(@NotNull String message);
+
+        Builder from(NotFoundSchema other);
+    }
+
+    public interface StatusCodeStage {
+        ErrorStage statusCode(@NotNull String statusCode);
+    }
+
+    public interface ErrorStage {
+        _FinalStage error(@NotNull NotFoundSchemaError error);
+    }
+
+    public interface _FinalStage {
+        NotFoundSchema build();
+
+        _FinalStage additionalProperty(String key, Object value);
+
+        _FinalStage additionalProperties(Map<String, Object> additionalProperties);
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder implements MessageStage, StatusCodeStage, ErrorStage, _FinalStage {
+        private String message;
+
+        private String statusCode;
+
+        private NotFoundSchemaError error;
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        @java.lang.Override
+        public Builder from(NotFoundSchema other) {
+            message(other.getMessage());
+            statusCode(other.getStatusCode());
+            error(other.getError());
+            return this;
+        }
+
+        @java.lang.Override
+        @JsonSetter("message")
+        public StatusCodeStage message(@NotNull String message) {
+            this.message = Objects.requireNonNull(message, "message must not be null");
+            return this;
+        }
+
+        @java.lang.Override
+        @JsonSetter("statusCode")
+        public ErrorStage statusCode(@NotNull String statusCode) {
+            this.statusCode = Objects.requireNonNull(statusCode, "statusCode must not be null");
+            return this;
+        }
+
+        @java.lang.Override
+        @JsonSetter("error")
+        public _FinalStage error(@NotNull NotFoundSchemaError error) {
+            this.error = Objects.requireNonNull(error, "error must not be null");
+            return this;
+        }
+
+        @java.lang.Override
+        public NotFoundSchema build() {
+            return new NotFoundSchema(message, statusCode, error, additionalProperties);
+        }
+
+        @java.lang.Override
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        @java.lang.Override
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/NotFoundSchemaError.java b/src/main/java/com/auth0/client/mgmt/types/NotFoundSchemaError.java
new file mode 100644
index 00000000..0274325c
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/NotFoundSchemaError.java
@@ -0,0 +1,73 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.fasterxml.jackson.annotation.JsonCreator;
+import com.fasterxml.jackson.annotation.JsonValue;
+
+public final class NotFoundSchemaError {
+    public static final NotFoundSchemaError NOT_FOUND = new NotFoundSchemaError(Value.NOT_FOUND, "Not Found");
+
+    private final Value value;
+
+    private final String string;
+
+    NotFoundSchemaError(Value value, String string) {
+        this.value = value;
+        this.string = string;
+    }
+
+    public Value getEnumValue() {
+        return value;
+    }
+
+    @java.lang.Override
+    @JsonValue
+    public String toString() {
+        return this.string;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        return (this == other)
+                || (other instanceof NotFoundSchemaError && this.string.equals(((NotFoundSchemaError) other).string));
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return this.string.hashCode();
+    }
+
+    public <T> T visit(Visitor<T> visitor) {
+        switch (value) {
+            case NOT_FOUND:
+                return visitor.visitNotFound();
+            case UNKNOWN:
+            default:
+                return visitor.visitUnknown(string);
+        }
+    }
+
+    @JsonCreator(mode = JsonCreator.Mode.DELEGATING)
+    public static NotFoundSchemaError valueOf(String value) {
+        switch (value) {
+            case "Not Found":
+                return NOT_FOUND;
+            default:
+                return new NotFoundSchemaError(Value.UNKNOWN, value);
+        }
+    }
+
+    public enum Value {
+        NOT_FOUND,
+
+        UNKNOWN
+    }
+
+    public interface Visitor<T> {
+        T visitNotFound();
+
+        T visitUnknown(String unknownType);
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/OauthScope.java b/src/main/java/com/auth0/client/mgmt/types/OauthScope.java
index 599e6535..3b9dad95 100644
--- a/src/main/java/com/auth0/client/mgmt/types/OauthScope.java
+++ b/src/main/java/com/auth0/client/mgmt/types/OauthScope.java
@@ -30,6 +30,8 @@ public final class OauthScope {
 
     public static final OauthScope READ_CURRENT_USER = new OauthScope(Value.READ_CURRENT_USER, "read:current_user");
 
+    public static final OauthScope DELETE_AGENTS = new OauthScope(Value.DELETE_AGENTS, "delete:agents");
+
     public static final OauthScope READ_SCIM_TOKEN = new OauthScope(Value.READ_SCIM_TOKEN, "read:scim_token");
 
     public static final OauthScope UPDATE_ROLES = new OauthScope(Value.UPDATE_ROLES, "update:roles");
@@ -174,6 +176,9 @@ public final class OauthScope {
     public static final OauthScope READ_ORGANIZATION_DISCOVERY_DOMAINS =
             new OauthScope(Value.READ_ORGANIZATION_DISCOVERY_DOMAINS, "read:organization_discovery_domains");
 
+    public static final OauthScope UPDATE_ORGANIZATION_CLIENTS =
+            new OauthScope(Value.UPDATE_ORGANIZATION_CLIENTS, "update:organization_clients");
+
     public static final OauthScope DELETE_DIRECTORY_PROVISIONINGS =
             new OauthScope(Value.DELETE_DIRECTORY_PROVISIONINGS, "delete:directory_provisionings");
 
@@ -238,6 +243,8 @@ public final class OauthScope {
     public static final OauthScope UPDATE_ORGANIZATION_DISCOVERY_DOMAINS =
             new OauthScope(Value.UPDATE_ORGANIZATION_DISCOVERY_DOMAINS, "update:organization_discovery_domains");
 
+    public static final OauthScope UPDATE_AGENTS = new OauthScope(Value.UPDATE_AGENTS, "update:agents");
+
     public static final OauthScope READ_ANOMALY_BLOCKS =
             new OauthScope(Value.READ_ANOMALY_BLOCKS, "read:anomaly_blocks");
 
@@ -290,6 +297,8 @@ public final class OauthScope {
 
     public static final OauthScope READ_GROUP_ROLES = new OauthScope(Value.READ_GROUP_ROLES, "read:group_roles");
 
+    public static final OauthScope READ_AGENTS = new OauthScope(Value.READ_AGENTS, "read:agents");
+
     public static final OauthScope READ_GRANTS = new OauthScope(Value.READ_GRANTS, "read:grants");
 
     public static final OauthScope UPDATE_SIGNING_KEYS =
@@ -405,9 +414,14 @@ public final class OauthScope {
     public static final OauthScope READ_FLOWS_VAULT_CONNECTIONS =
             new OauthScope(Value.READ_FLOWS_VAULT_CONNECTIONS, "read:flows_vault_connections");
 
+    public static final OauthScope CREATE_AGENTS = new OauthScope(Value.CREATE_AGENTS, "create:agents");
+
     public static final OauthScope UPDATE_ENCRYPTION_KEYS =
             new OauthScope(Value.UPDATE_ENCRYPTION_KEYS, "update:encryption_keys");
 
+    public static final OauthScope READ_ORGANIZATION_CLIENTS =
+            new OauthScope(Value.READ_ORGANIZATION_CLIENTS, "read:organization_clients");
+
     public static final OauthScope UPDATE_CLIENT_KEYS = new OauthScope(Value.UPDATE_CLIENT_KEYS, "update:client_keys");
 
     public static final OauthScope DELETE_GUARDIAN_ENROLLMENTS =
@@ -448,6 +462,9 @@ public final class OauthScope {
 
     public static final OauthScope READ_ORGANIZATIONS = new OauthScope(Value.READ_ORGANIZATIONS, "read:organizations");
 
+    public static final OauthScope CREATE_ORGANIZATION_CLIENTS =
+            new OauthScope(Value.CREATE_ORGANIZATION_CLIENTS, "create:organization_clients");
+
     public static final OauthScope READ_CUSTOM_DOMAINS =
             new OauthScope(Value.READ_CUSTOM_DOMAINS, "read:custom_domains");
 
@@ -502,6 +519,9 @@ public final class OauthScope {
     public static final OauthScope READ_ORGANIZATION_CONNECTIONS =
             new OauthScope(Value.READ_ORGANIZATION_CONNECTIONS, "read:organization_connections");
 
+    public static final OauthScope DELETE_ORGANIZATION_CLIENTS =
+            new OauthScope(Value.DELETE_ORGANIZATION_CLIENTS, "delete:organization_clients");
+
     public static final OauthScope CREATE_CONNECTIONS = new OauthScope(Value.CREATE_CONNECTIONS, "create:connections");
 
     public static final OauthScope DELETE_DEVICE_CREDENTIALS =
@@ -686,6 +706,8 @@ public <T> T visit(Visitor<T> visitor) {
                 return visitor.visitUpdateTokenExchangeProfiles();
             case READ_CURRENT_USER:
                 return visitor.visitReadCurrentUser();
+            case DELETE_AGENTS:
+                return visitor.visitDeleteAgents();
             case READ_SCIM_TOKEN:
                 return visitor.visitReadScimToken();
             case UPDATE_ROLES:
@@ -792,6 +814,8 @@ public <T> T visit(Visitor<T> visitor) {
                 return visitor.visitCreateCustomDomains();
             case READ_ORGANIZATION_DISCOVERY_DOMAINS:
                 return visitor.visitReadOrganizationDiscoveryDomains();
+            case UPDATE_ORGANIZATION_CLIENTS:
+                return visitor.visitUpdateOrganizationClients();
             case DELETE_DIRECTORY_PROVISIONINGS:
                 return visitor.visitDeleteDirectoryProvisionings();
             case READ_CLIENT_CREDENTIALS:
@@ -840,6 +864,8 @@ public <T> T visit(Visitor<T> visitor) {
                 return visitor.visitReadUserEffectivePermissions();
             case UPDATE_ORGANIZATION_DISCOVERY_DOMAINS:
                 return visitor.visitUpdateOrganizationDiscoveryDomains();
+            case UPDATE_AGENTS:
+                return visitor.visitUpdateAgents();
             case READ_ANOMALY_BLOCKS:
                 return visitor.visitReadAnomalyBlocks();
             case UPDATE_CLIENT_TOKEN_VAULT_PRIVILEGED_ACCESS:
@@ -880,6 +906,8 @@ public <T> T visit(Visitor<T> visitor) {
                 return visitor.visitUpdateUsers();
             case READ_GROUP_ROLES:
                 return visitor.visitReadGroupRoles();
+            case READ_AGENTS:
+                return visitor.visitReadAgents();
             case READ_GRANTS:
                 return visitor.visitReadGrants();
             case UPDATE_SIGNING_KEYS:
@@ -970,8 +998,12 @@ public <T> T visit(Visitor<T> visitor) {
                 return visitor.visitDeleteUserAttributeProfiles();
             case READ_FLOWS_VAULT_CONNECTIONS:
                 return visitor.visitReadFlowsVaultConnections();
+            case CREATE_AGENTS:
+                return visitor.visitCreateAgents();
             case UPDATE_ENCRYPTION_KEYS:
                 return visitor.visitUpdateEncryptionKeys();
+            case READ_ORGANIZATION_CLIENTS:
+                return visitor.visitReadOrganizationClients();
             case UPDATE_CLIENT_KEYS:
                 return visitor.visitUpdateClientKeys();
             case DELETE_GUARDIAN_ENROLLMENTS:
@@ -1000,6 +1032,8 @@ public <T> T visit(Visitor<T> visitor) {
                 return visitor.visitUpdateVdcsTemplates();
             case READ_ORGANIZATIONS:
                 return visitor.visitReadOrganizations();
+            case CREATE_ORGANIZATION_CLIENTS:
+                return visitor.visitCreateOrganizationClients();
             case READ_CUSTOM_DOMAINS:
                 return visitor.visitReadCustomDomains();
             case CREATE_SCIM_CONFIG:
@@ -1040,6 +1074,8 @@ public <T> T visit(Visitor<T> visitor) {
                 return visitor.visitReadAttackProtection();
             case READ_ORGANIZATION_CONNECTIONS:
                 return visitor.visitReadOrganizationConnections();
+            case DELETE_ORGANIZATION_CLIENTS:
+                return visitor.visitDeleteOrganizationClients();
             case CREATE_CONNECTIONS:
                 return visitor.visitCreateConnections();
             case DELETE_DEVICE_CREDENTIALS:
@@ -1167,6 +1203,8 @@ public static OauthScope valueOf(String value) {
                 return UPDATE_TOKEN_EXCHANGE_PROFILES;
             case "read:current_user":
                 return READ_CURRENT_USER;
+            case "delete:agents":
+                return DELETE_AGENTS;
             case "read:scim_token":
                 return READ_SCIM_TOKEN;
             case "update:roles":
@@ -1273,6 +1311,8 @@ public static OauthScope valueOf(String value) {
                 return CREATE_CUSTOM_DOMAINS;
             case "read:organization_discovery_domains":
                 return READ_ORGANIZATION_DISCOVERY_DOMAINS;
+            case "update:organization_clients":
+                return UPDATE_ORGANIZATION_CLIENTS;
             case "delete:directory_provisionings":
                 return DELETE_DIRECTORY_PROVISIONINGS;
             case "read:client_credentials":
@@ -1321,6 +1361,8 @@ public static OauthScope valueOf(String value) {
                 return READ_USER_EFFECTIVE_PERMISSIONS;
             case "update:organization_discovery_domains":
                 return UPDATE_ORGANIZATION_DISCOVERY_DOMAINS;
+            case "update:agents":
+                return UPDATE_AGENTS;
             case "read:anomaly_blocks":
                 return READ_ANOMALY_BLOCKS;
             case "update:client_token_vault_privileged_access":
@@ -1361,6 +1403,8 @@ public static OauthScope valueOf(String value) {
                 return UPDATE_USERS;
             case "read:group_roles":
                 return READ_GROUP_ROLES;
+            case "read:agents":
+                return READ_AGENTS;
             case "read:grants":
                 return READ_GRANTS;
             case "update:signing_keys":
@@ -1451,8 +1495,12 @@ public static OauthScope valueOf(String value) {
                 return DELETE_USER_ATTRIBUTE_PROFILES;
             case "read:flows_vault_connections":
                 return READ_FLOWS_VAULT_CONNECTIONS;
+            case "create:agents":
+                return CREATE_AGENTS;
             case "update:encryption_keys":
                 return UPDATE_ENCRYPTION_KEYS;
+            case "read:organization_clients":
+                return READ_ORGANIZATION_CLIENTS;
             case "update:client_keys":
                 return UPDATE_CLIENT_KEYS;
             case "delete:guardian_enrollments":
@@ -1481,6 +1529,8 @@ public static OauthScope valueOf(String value) {
                 return UPDATE_VDCS_TEMPLATES;
             case "read:organizations":
                 return READ_ORGANIZATIONS;
+            case "create:organization_clients":
+                return CREATE_ORGANIZATION_CLIENTS;
             case "read:custom_domains":
                 return READ_CUSTOM_DOMAINS;
             case "create:scim_config":
@@ -1521,6 +1571,8 @@ public static OauthScope valueOf(String value) {
                 return READ_ATTACK_PROTECTION;
             case "read:organization_connections":
                 return READ_ORGANIZATION_CONNECTIONS;
+            case "delete:organization_clients":
+                return DELETE_ORGANIZATION_CLIENTS;
             case "create:connections":
                 return CREATE_CONNECTIONS;
             case "delete:device_credentials":
@@ -1635,6 +1687,14 @@ public enum Value {
 
         DELETE_ACTIONS,
 
+        CREATE_AGENTS,
+
+        READ_AGENTS,
+
+        UPDATE_AGENTS,
+
+        DELETE_AGENTS,
+
         READ_ANOMALY_BLOCKS,
 
         DELETE_ANOMALY_BLOCKS,
@@ -2099,6 +2159,14 @@ public enum Value {
 
         DELETE_VDCS_TEMPLATES,
 
+        CREATE_ORGANIZATION_CLIENTS,
+
+        READ_ORGANIZATION_CLIENTS,
+
+        UPDATE_ORGANIZATION_CLIENTS,
+
+        DELETE_ORGANIZATION_CLIENTS,
+
         UNKNOWN
     }
 
@@ -2111,6 +2179,14 @@ public interface Visitor<T> {
 
         T visitDeleteActions();
 
+        T visitCreateAgents();
+
+        T visitReadAgents();
+
+        T visitUpdateAgents();
+
+        T visitDeleteAgents();
+
         T visitReadAnomalyBlocks();
 
         T visitDeleteAnomalyBlocks();
@@ -2575,6 +2651,14 @@ public interface Visitor<T> {
 
         T visitDeleteVdcsTemplates();
 
+        T visitCreateOrganizationClients();
+
+        T visitReadOrganizationClients();
+
+        T visitUpdateOrganizationClients();
+
+        T visitDeleteOrganizationClients();
+
         T visitUnknown(String unknownType);
     }
 }
diff --git a/src/main/java/com/auth0/client/mgmt/types/Organization.java b/src/main/java/com/auth0/client/mgmt/types/Organization.java
index 1b8dafcb..cd660990 100644
--- a/src/main/java/com/auth0/client/mgmt/types/Organization.java
+++ b/src/main/java/com/auth0/client/mgmt/types/Organization.java
@@ -35,6 +35,10 @@ public final class Organization {
 
     private final Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess;
 
+    private final Optional<Boolean> isAppEntitlementActive;
+
+    private final Optional<OrganizationClientAssociation> client;
+
     private final Map<String, Object> additionalProperties;
 
     private Organization(
@@ -45,6 +49,8 @@ private Organization(
             Optional<Map<String, OptionalNullable<String>>> metadata,
             Optional<TokenQuota> tokenQuota,
             Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess,
+            Optional<Boolean> isAppEntitlementActive,
+            Optional<OrganizationClientAssociation> client,
             Map<String, Object> additionalProperties) {
         this.id = id;
         this.name = name;
@@ -53,6 +59,8 @@ private Organization(
         this.metadata = metadata;
         this.tokenQuota = tokenQuota;
         this.thirdPartyClientAccess = thirdPartyClientAccess;
+        this.isAppEntitlementActive = isAppEntitlementActive;
+        this.client = client;
         this.additionalProperties = additionalProperties;
     }
 
@@ -100,6 +108,19 @@ public Optional<OrganizationThirdPartyClientAccessEnum> getThirdPartyClientAcces
         return thirdPartyClientAccess;
     }
 
+    /**
+     * @return Whether app entitlement is active for this organization.
+     */
+    @JsonProperty("is_app_entitlement_active")
+    public Optional<Boolean> getIsAppEntitlementActive() {
+        return isAppEntitlementActive;
+    }
+
+    @JsonProperty("client")
+    public Optional<OrganizationClientAssociation> getClient() {
+        return client;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -118,7 +139,9 @@ private boolean equalTo(Organization other) {
                 && branding.equals(other.branding)
                 && metadata.equals(other.metadata)
                 && tokenQuota.equals(other.tokenQuota)
-                && thirdPartyClientAccess.equals(other.thirdPartyClientAccess);
+                && thirdPartyClientAccess.equals(other.thirdPartyClientAccess)
+                && isAppEntitlementActive.equals(other.isAppEntitlementActive)
+                && client.equals(other.client);
     }
 
     @java.lang.Override
@@ -130,7 +153,9 @@ public int hashCode() {
                 this.branding,
                 this.metadata,
                 this.tokenQuota,
-                this.thirdPartyClientAccess);
+                this.thirdPartyClientAccess,
+                this.isAppEntitlementActive,
+                this.client);
     }
 
     @java.lang.Override
@@ -158,6 +183,10 @@ public static final class Builder {
 
         private Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess = Optional.empty();
 
+        private Optional<Boolean> isAppEntitlementActive = Optional.empty();
+
+        private Optional<OrganizationClientAssociation> client = Optional.empty();
+
         @JsonAnySetter
         private Map<String, Object> additionalProperties = new HashMap<>();
 
@@ -171,6 +200,8 @@ public Builder from(Organization other) {
             metadata(other.getMetadata());
             tokenQuota(other.getTokenQuota());
             thirdPartyClientAccess(other.getThirdPartyClientAccess());
+            isAppEntitlementActive(other.getIsAppEntitlementActive());
+            client(other.getClient());
             return this;
         }
 
@@ -260,6 +291,31 @@ public Builder thirdPartyClientAccess(OrganizationThirdPartyClientAccessEnum thi
             return this;
         }
 
+        /**
+         * <p>Whether app entitlement is active for this organization.</p>
+         */
+        @JsonSetter(value = "is_app_entitlement_active", nulls = Nulls.SKIP)
+        public Builder isAppEntitlementActive(Optional<Boolean> isAppEntitlementActive) {
+            this.isAppEntitlementActive = isAppEntitlementActive;
+            return this;
+        }
+
+        public Builder isAppEntitlementActive(Boolean isAppEntitlementActive) {
+            this.isAppEntitlementActive = Optional.ofNullable(isAppEntitlementActive);
+            return this;
+        }
+
+        @JsonSetter(value = "client", nulls = Nulls.SKIP)
+        public Builder client(Optional<OrganizationClientAssociation> client) {
+            this.client = client;
+            return this;
+        }
+
+        public Builder client(OrganizationClientAssociation client) {
+            this.client = Optional.ofNullable(client);
+            return this;
+        }
+
         public Organization build() {
             return new Organization(
                     id,
@@ -269,6 +325,8 @@ public Organization build() {
                     metadata,
                     tokenQuota,
                     thirdPartyClientAccess,
+                    isAppEntitlementActive,
+                    client,
                     additionalProperties);
         }
 
diff --git a/src/main/java/com/auth0/client/mgmt/types/OrganizationClient.java b/src/main/java/com/auth0/client/mgmt/types/OrganizationClient.java
new file mode 100644
index 00000000..1d894555
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/OrganizationClient.java
@@ -0,0 +1,188 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Objects;
+import org.jetbrains.annotations.NotNull;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = OrganizationClient.Builder.class)
+public final class OrganizationClient {
+    private final String clientId;
+
+    private final boolean useForMemberAccess;
+
+    private final OrganizationClientMetadata client;
+
+    private final Map<String, Object> additionalProperties;
+
+    private OrganizationClient(
+            String clientId,
+            boolean useForMemberAccess,
+            OrganizationClientMetadata client,
+            Map<String, Object> additionalProperties) {
+        this.clientId = clientId;
+        this.useForMemberAccess = useForMemberAccess;
+        this.client = client;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return The identifier of the client associated with the organization.
+     */
+    @JsonProperty("client_id")
+    public String getClientId() {
+        return clientId;
+    }
+
+    /**
+     * @return Whether this client is used for member access to the organization.
+     */
+    @JsonProperty("use_for_member_access")
+    public boolean getUseForMemberAccess() {
+        return useForMemberAccess;
+    }
+
+    @JsonProperty("client")
+    public OrganizationClientMetadata getClient() {
+        return client;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof OrganizationClient && equalTo((OrganizationClient) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(OrganizationClient other) {
+        return clientId.equals(other.clientId)
+                && useForMemberAccess == other.useForMemberAccess
+                && client.equals(other.client);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.clientId, this.useForMemberAccess, this.client);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static ClientIdStage builder() {
+        return new Builder();
+    }
+
+    public interface ClientIdStage {
+        /**
+         * <p>The identifier of the client associated with the organization.</p>
+         */
+        UseForMemberAccessStage clientId(@NotNull String clientId);
+
+        Builder from(OrganizationClient other);
+    }
+
+    public interface UseForMemberAccessStage {
+        /**
+         * <p>Whether this client is used for member access to the organization.</p>
+         */
+        ClientStage useForMemberAccess(boolean useForMemberAccess);
+    }
+
+    public interface ClientStage {
+        _FinalStage client(@NotNull OrganizationClientMetadata client);
+    }
+
+    public interface _FinalStage {
+        OrganizationClient build();
+
+        _FinalStage additionalProperty(String key, Object value);
+
+        _FinalStage additionalProperties(Map<String, Object> additionalProperties);
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder implements ClientIdStage, UseForMemberAccessStage, ClientStage, _FinalStage {
+        private String clientId;
+
+        private boolean useForMemberAccess;
+
+        private OrganizationClientMetadata client;
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        @java.lang.Override
+        public Builder from(OrganizationClient other) {
+            clientId(other.getClientId());
+            useForMemberAccess(other.getUseForMemberAccess());
+            client(other.getClient());
+            return this;
+        }
+
+        /**
+         * <p>The identifier of the client associated with the organization.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        @JsonSetter("client_id")
+        public UseForMemberAccessStage clientId(@NotNull String clientId) {
+            this.clientId = Objects.requireNonNull(clientId, "clientId must not be null");
+            return this;
+        }
+
+        /**
+         * <p>Whether this client is used for member access to the organization.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        @JsonSetter("use_for_member_access")
+        public ClientStage useForMemberAccess(boolean useForMemberAccess) {
+            this.useForMemberAccess = useForMemberAccess;
+            return this;
+        }
+
+        @java.lang.Override
+        @JsonSetter("client")
+        public _FinalStage client(@NotNull OrganizationClientMetadata client) {
+            this.client = Objects.requireNonNull(client, "client must not be null");
+            return this;
+        }
+
+        @java.lang.Override
+        public OrganizationClient build() {
+            return new OrganizationClient(clientId, useForMemberAccess, client, additionalProperties);
+        }
+
+        @java.lang.Override
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        @java.lang.Override
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/OrganizationClientAssociation.java b/src/main/java/com/auth0/client/mgmt/types/OrganizationClientAssociation.java
new file mode 100644
index 00000000..c5d1c142
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/OrganizationClientAssociation.java
@@ -0,0 +1,112 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Optional;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = OrganizationClientAssociation.Builder.class)
+public final class OrganizationClientAssociation {
+    private final Optional<Boolean> useForMemberAccess;
+
+    private final Map<String, Object> additionalProperties;
+
+    private OrganizationClientAssociation(
+            Optional<Boolean> useForMemberAccess, Map<String, Object> additionalProperties) {
+        this.useForMemberAccess = useForMemberAccess;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return Whether this client is used for member access to the organization.
+     */
+    @JsonProperty("use_for_member_access")
+    public Optional<Boolean> getUseForMemberAccess() {
+        return useForMemberAccess;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof OrganizationClientAssociation && equalTo((OrganizationClientAssociation) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(OrganizationClientAssociation other) {
+        return useForMemberAccess.equals(other.useForMemberAccess);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.useForMemberAccess);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder {
+        private Optional<Boolean> useForMemberAccess = Optional.empty();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        public Builder from(OrganizationClientAssociation other) {
+            useForMemberAccess(other.getUseForMemberAccess());
+            return this;
+        }
+
+        /**
+         * <p>Whether this client is used for member access to the organization.</p>
+         */
+        @JsonSetter(value = "use_for_member_access", nulls = Nulls.SKIP)
+        public Builder useForMemberAccess(Optional<Boolean> useForMemberAccess) {
+            this.useForMemberAccess = useForMemberAccess;
+            return this;
+        }
+
+        public Builder useForMemberAccess(Boolean useForMemberAccess) {
+            this.useForMemberAccess = Optional.ofNullable(useForMemberAccess);
+            return this;
+        }
+
+        public OrganizationClientAssociation build() {
+            return new OrganizationClientAssociation(useForMemberAccess, additionalProperties);
+        }
+
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/OrganizationClientMetadata.java b/src/main/java/com/auth0/client/mgmt/types/OrganizationClientMetadata.java
new file mode 100644
index 00000000..5d734917
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/OrganizationClientMetadata.java
@@ -0,0 +1,293 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.NullableNonemptyFilter;
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.core.OptionalNullable;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Optional;
+import org.jetbrains.annotations.Nullable;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = OrganizationClientMetadata.Builder.class)
+public final class OrganizationClientMetadata {
+    private final Optional<String> name;
+
+    private final Optional<String> appType;
+
+    private final OptionalNullable<String> logoUri;
+
+    private final Optional<Boolean> isFirstParty;
+
+    private final Optional<List<String>> grantTypes;
+
+    private final Optional<OrganizationClientMetadataOrganizationUsageEnum> organizationUsage;
+
+    private final Map<String, Object> additionalProperties;
+
+    private OrganizationClientMetadata(
+            Optional<String> name,
+            Optional<String> appType,
+            OptionalNullable<String> logoUri,
+            Optional<Boolean> isFirstParty,
+            Optional<List<String>> grantTypes,
+            Optional<OrganizationClientMetadataOrganizationUsageEnum> organizationUsage,
+            Map<String, Object> additionalProperties) {
+        this.name = name;
+        this.appType = appType;
+        this.logoUri = logoUri;
+        this.isFirstParty = isFirstParty;
+        this.grantTypes = grantTypes;
+        this.organizationUsage = organizationUsage;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return The name of the client.
+     */
+    @JsonProperty("name")
+    public Optional<String> getName() {
+        return name;
+    }
+
+    /**
+     * @return The type of the client application.
+     */
+    @JsonProperty("app_type")
+    public Optional<String> getAppType() {
+        return appType;
+    }
+
+    /**
+     * @return The URI of the client logo.
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("logo_uri")
+    public OptionalNullable<String> getLogoUri() {
+        if (logoUri == null) {
+            return OptionalNullable.absent();
+        }
+        return logoUri;
+    }
+
+    /**
+     * @return Whether this client is a first-party client (true) or not (false).
+     */
+    @JsonProperty("is_first_party")
+    public Optional<Boolean> getIsFirstParty() {
+        return isFirstParty;
+    }
+
+    /**
+     * @return The grant types enabled for the client.
+     */
+    @JsonProperty("grant_types")
+    public Optional<List<String>> getGrantTypes() {
+        return grantTypes;
+    }
+
+    @JsonProperty("organization_usage")
+    public Optional<OrganizationClientMetadataOrganizationUsageEnum> getOrganizationUsage() {
+        return organizationUsage;
+    }
+
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("logo_uri")
+    private OptionalNullable<String> _getLogoUri() {
+        return logoUri;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof OrganizationClientMetadata && equalTo((OrganizationClientMetadata) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(OrganizationClientMetadata other) {
+        return name.equals(other.name)
+                && appType.equals(other.appType)
+                && logoUri.equals(other.logoUri)
+                && isFirstParty.equals(other.isFirstParty)
+                && grantTypes.equals(other.grantTypes)
+                && organizationUsage.equals(other.organizationUsage);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(
+                this.name, this.appType, this.logoUri, this.isFirstParty, this.grantTypes, this.organizationUsage);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder {
+        private Optional<String> name = Optional.empty();
+
+        private Optional<String> appType = Optional.empty();
+
+        private OptionalNullable<String> logoUri = OptionalNullable.absent();
+
+        private Optional<Boolean> isFirstParty = Optional.empty();
+
+        private Optional<List<String>> grantTypes = Optional.empty();
+
+        private Optional<OrganizationClientMetadataOrganizationUsageEnum> organizationUsage = Optional.empty();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        public Builder from(OrganizationClientMetadata other) {
+            name(other.getName());
+            appType(other.getAppType());
+            logoUri(other.getLogoUri());
+            isFirstParty(other.getIsFirstParty());
+            grantTypes(other.getGrantTypes());
+            organizationUsage(other.getOrganizationUsage());
+            return this;
+        }
+
+        /**
+         * <p>The name of the client.</p>
+         */
+        @JsonSetter(value = "name", nulls = Nulls.SKIP)
+        public Builder name(Optional<String> name) {
+            this.name = name;
+            return this;
+        }
+
+        public Builder name(String name) {
+            this.name = Optional.ofNullable(name);
+            return this;
+        }
+
+        /**
+         * <p>The type of the client application.</p>
+         */
+        @JsonSetter(value = "app_type", nulls = Nulls.SKIP)
+        public Builder appType(Optional<String> appType) {
+            this.appType = appType;
+            return this;
+        }
+
+        public Builder appType(String appType) {
+            this.appType = Optional.ofNullable(appType);
+            return this;
+        }
+
+        /**
+         * <p>The URI of the client logo.</p>
+         */
+        @JsonSetter(value = "logo_uri", nulls = Nulls.SKIP)
+        public Builder logoUri(@Nullable OptionalNullable<String> logoUri) {
+            this.logoUri = logoUri;
+            return this;
+        }
+
+        public Builder logoUri(String logoUri) {
+            this.logoUri = OptionalNullable.of(logoUri);
+            return this;
+        }
+
+        public Builder logoUri(Optional<String> logoUri) {
+            if (logoUri.isPresent()) {
+                this.logoUri = OptionalNullable.of(logoUri.get());
+            } else {
+                this.logoUri = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder logoUri(com.auth0.client.mgmt.core.Nullable<String> logoUri) {
+            if (logoUri.isNull()) {
+                this.logoUri = OptionalNullable.ofNull();
+            } else if (logoUri.isEmpty()) {
+                this.logoUri = OptionalNullable.absent();
+            } else {
+                this.logoUri = OptionalNullable.of(logoUri.get());
+            }
+            return this;
+        }
+
+        /**
+         * <p>Whether this client is a first-party client (true) or not (false).</p>
+         */
+        @JsonSetter(value = "is_first_party", nulls = Nulls.SKIP)
+        public Builder isFirstParty(Optional<Boolean> isFirstParty) {
+            this.isFirstParty = isFirstParty;
+            return this;
+        }
+
+        public Builder isFirstParty(Boolean isFirstParty) {
+            this.isFirstParty = Optional.ofNullable(isFirstParty);
+            return this;
+        }
+
+        /**
+         * <p>The grant types enabled for the client.</p>
+         */
+        @JsonSetter(value = "grant_types", nulls = Nulls.SKIP)
+        public Builder grantTypes(Optional<List<String>> grantTypes) {
+            this.grantTypes = grantTypes;
+            return this;
+        }
+
+        public Builder grantTypes(List<String> grantTypes) {
+            this.grantTypes = Optional.ofNullable(grantTypes);
+            return this;
+        }
+
+        @JsonSetter(value = "organization_usage", nulls = Nulls.SKIP)
+        public Builder organizationUsage(Optional<OrganizationClientMetadataOrganizationUsageEnum> organizationUsage) {
+            this.organizationUsage = organizationUsage;
+            return this;
+        }
+
+        public Builder organizationUsage(OrganizationClientMetadataOrganizationUsageEnum organizationUsage) {
+            this.organizationUsage = Optional.ofNullable(organizationUsage);
+            return this;
+        }
+
+        public OrganizationClientMetadata build() {
+            return new OrganizationClientMetadata(
+                    name, appType, logoUri, isFirstParty, grantTypes, organizationUsage, additionalProperties);
+        }
+
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/OrganizationClientMetadataOrganizationUsageEnum.java b/src/main/java/com/auth0/client/mgmt/types/OrganizationClientMetadataOrganizationUsageEnum.java
new file mode 100644
index 00000000..8c11732f
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/OrganizationClientMetadataOrganizationUsageEnum.java
@@ -0,0 +1,97 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.fasterxml.jackson.annotation.JsonCreator;
+import com.fasterxml.jackson.annotation.JsonValue;
+
+public final class OrganizationClientMetadataOrganizationUsageEnum {
+    public static final OrganizationClientMetadataOrganizationUsageEnum ALLOW =
+            new OrganizationClientMetadataOrganizationUsageEnum(Value.ALLOW, "allow");
+
+    public static final OrganizationClientMetadataOrganizationUsageEnum REQUIRE =
+            new OrganizationClientMetadataOrganizationUsageEnum(Value.REQUIRE, "require");
+
+    public static final OrganizationClientMetadataOrganizationUsageEnum DENY =
+            new OrganizationClientMetadataOrganizationUsageEnum(Value.DENY, "deny");
+
+    private final Value value;
+
+    private final String string;
+
+    OrganizationClientMetadataOrganizationUsageEnum(Value value, String string) {
+        this.value = value;
+        this.string = string;
+    }
+
+    public Value getEnumValue() {
+        return value;
+    }
+
+    @java.lang.Override
+    @JsonValue
+    public String toString() {
+        return this.string;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        return (this == other)
+                || (other instanceof OrganizationClientMetadataOrganizationUsageEnum
+                        && this.string.equals(((OrganizationClientMetadataOrganizationUsageEnum) other).string));
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return this.string.hashCode();
+    }
+
+    public <T> T visit(Visitor<T> visitor) {
+        switch (value) {
+            case ALLOW:
+                return visitor.visitAllow();
+            case REQUIRE:
+                return visitor.visitRequire();
+            case DENY:
+                return visitor.visitDeny();
+            case UNKNOWN:
+            default:
+                return visitor.visitUnknown(string);
+        }
+    }
+
+    @JsonCreator(mode = JsonCreator.Mode.DELEGATING)
+    public static OrganizationClientMetadataOrganizationUsageEnum valueOf(String value) {
+        switch (value) {
+            case "allow":
+                return ALLOW;
+            case "require":
+                return REQUIRE;
+            case "deny":
+                return DENY;
+            default:
+                return new OrganizationClientMetadataOrganizationUsageEnum(Value.UNKNOWN, value);
+        }
+    }
+
+    public enum Value {
+        DENY,
+
+        ALLOW,
+
+        REQUIRE,
+
+        UNKNOWN
+    }
+
+    public interface Visitor<T> {
+        T visitDeny();
+
+        T visitAllow();
+
+        T visitRequire();
+
+        T visitUnknown(String unknownType);
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/PatchAgentRequestParameters.java b/src/main/java/com/auth0/client/mgmt/types/PatchAgentRequestParameters.java
new file mode 100644
index 00000000..cc29d6a0
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/PatchAgentRequestParameters.java
@@ -0,0 +1,175 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.NullableNonemptyFilter;
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.core.OptionalNullable;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Optional;
+import org.jetbrains.annotations.Nullable;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = PatchAgentRequestParameters.Builder.class)
+public final class PatchAgentRequestParameters {
+    private final Optional<String> name;
+
+    private final OptionalNullable<Map<String, Object>> metadata;
+
+    private final Map<String, Object> additionalProperties;
+
+    private PatchAgentRequestParameters(
+            Optional<String> name,
+            OptionalNullable<Map<String, Object>> metadata,
+            Map<String, Object> additionalProperties) {
+        this.name = name;
+        this.metadata = metadata;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return The agent name. Cannot contain &lt;, &gt;, or null bytes.
+     */
+    @JsonProperty("name")
+    public Optional<String> getName() {
+        return name;
+    }
+
+    /**
+     * @return Arbitrary key-value metadata for the agent. Pass null to clear all metadata.
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("metadata")
+    public OptionalNullable<Map<String, Object>> getMetadata() {
+        if (metadata == null) {
+            return OptionalNullable.absent();
+        }
+        return metadata;
+    }
+
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("metadata")
+    private OptionalNullable<Map<String, Object>> _getMetadata() {
+        return metadata;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof PatchAgentRequestParameters && equalTo((PatchAgentRequestParameters) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(PatchAgentRequestParameters other) {
+        return name.equals(other.name) && metadata.equals(other.metadata);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.name, this.metadata);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static Builder builder() {
+        return new Builder();
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder {
+        private Optional<String> name = Optional.empty();
+
+        private OptionalNullable<Map<String, Object>> metadata = OptionalNullable.absent();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        public Builder from(PatchAgentRequestParameters other) {
+            name(other.getName());
+            metadata(other.getMetadata());
+            return this;
+        }
+
+        /**
+         * <p>The agent name. Cannot contain &lt;, &gt;, or null bytes.</p>
+         */
+        @JsonSetter(value = "name", nulls = Nulls.SKIP)
+        public Builder name(Optional<String> name) {
+            this.name = name;
+            return this;
+        }
+
+        public Builder name(String name) {
+            this.name = Optional.ofNullable(name);
+            return this;
+        }
+
+        /**
+         * <p>Arbitrary key-value metadata for the agent. Pass null to clear all metadata.</p>
+         */
+        @JsonSetter(value = "metadata", nulls = Nulls.SKIP)
+        public Builder metadata(@Nullable OptionalNullable<Map<String, Object>> metadata) {
+            this.metadata = metadata;
+            return this;
+        }
+
+        public Builder metadata(Map<String, Object> metadata) {
+            this.metadata = OptionalNullable.of(metadata);
+            return this;
+        }
+
+        public Builder metadata(Optional<Map<String, Object>> metadata) {
+            if (metadata.isPresent()) {
+                this.metadata = OptionalNullable.of(metadata.get());
+            } else {
+                this.metadata = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder metadata(com.auth0.client.mgmt.core.Nullable<Map<String, Object>> metadata) {
+            if (metadata.isNull()) {
+                this.metadata = OptionalNullable.ofNull();
+            } else if (metadata.isEmpty()) {
+                this.metadata = OptionalNullable.absent();
+            } else {
+                this.metadata = OptionalNullable.of(metadata.get());
+            }
+            return this;
+        }
+
+        public PatchAgentRequestParameters build() {
+            return new PatchAgentRequestParameters(name, metadata, additionalProperties);
+        }
+
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/Role.java b/src/main/java/com/auth0/client/mgmt/types/Role.java
index f0b7d092..1b2362d7 100644
--- a/src/main/java/com/auth0/client/mgmt/types/Role.java
+++ b/src/main/java/com/auth0/client/mgmt/types/Role.java
@@ -26,16 +26,24 @@ public final class Role {
 
     private final Optional<String> description;
 
+    private final Optional<RoleTypeEnum> type;
+
+    private final Optional<String> ownerId;
+
     private final Map<String, Object> additionalProperties;
 
     private Role(
             Optional<String> id,
             Optional<String> name,
             Optional<String> description,
+            Optional<RoleTypeEnum> type,
+            Optional<String> ownerId,
             Map<String, Object> additionalProperties) {
         this.id = id;
         this.name = name;
         this.description = description;
+        this.type = type;
+        this.ownerId = ownerId;
         this.additionalProperties = additionalProperties;
     }
 
@@ -63,6 +71,19 @@ public Optional<String> getDescription() {
         return description;
     }
 
+    @JsonProperty("type")
+    public Optional<RoleTypeEnum> getType() {
+        return type;
+    }
+
+    /**
+     * @return The id of the entity that owns this role, such as an organization id.
+     */
+    @JsonProperty("owner_id")
+    public Optional<String> getOwnerId() {
+        return ownerId;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -75,12 +96,16 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(Role other) {
-        return id.equals(other.id) && name.equals(other.name) && description.equals(other.description);
+        return id.equals(other.id)
+                && name.equals(other.name)
+                && description.equals(other.description)
+                && type.equals(other.type)
+                && ownerId.equals(other.ownerId);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.id, this.name, this.description);
+        return Objects.hash(this.id, this.name, this.description, this.type, this.ownerId);
     }
 
     @java.lang.Override
@@ -100,6 +125,10 @@ public static final class Builder {
 
         private Optional<String> description = Optional.empty();
 
+        private Optional<RoleTypeEnum> type = Optional.empty();
+
+        private Optional<String> ownerId = Optional.empty();
+
         @JsonAnySetter
         private Map<String, Object> additionalProperties = new HashMap<>();
 
@@ -109,6 +138,8 @@ public Builder from(Role other) {
             id(other.getId());
             name(other.getName());
             description(other.getDescription());
+            type(other.getType());
+            ownerId(other.getOwnerId());
             return this;
         }
 
@@ -154,8 +185,33 @@ public Builder description(String description) {
             return this;
         }
 
+        @JsonSetter(value = "type", nulls = Nulls.SKIP)
+        public Builder type(Optional<RoleTypeEnum> type) {
+            this.type = type;
+            return this;
+        }
+
+        public Builder type(RoleTypeEnum type) {
+            this.type = Optional.ofNullable(type);
+            return this;
+        }
+
+        /**
+         * <p>The id of the entity that owns this role, such as an organization id.</p>
+         */
+        @JsonSetter(value = "owner_id", nulls = Nulls.SKIP)
+        public Builder ownerId(Optional<String> ownerId) {
+            this.ownerId = ownerId;
+            return this;
+        }
+
+        public Builder ownerId(String ownerId) {
+            this.ownerId = Optional.ofNullable(ownerId);
+            return this;
+        }
+
         public Role build() {
-            return new Role(id, name, description, additionalProperties);
+            return new Role(id, name, description, type, ownerId, additionalProperties);
         }
 
         public Builder additionalProperty(String key, Object value) {
diff --git a/src/main/java/com/auth0/client/mgmt/types/RoleGroup.java b/src/main/java/com/auth0/client/mgmt/types/RoleGroup.java
new file mode 100644
index 00000000..15e8a298
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/RoleGroup.java
@@ -0,0 +1,578 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.NullableNonemptyFilter;
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.core.OptionalNullable;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.time.OffsetDateTime;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Optional;
+import org.jetbrains.annotations.NotNull;
+import org.jetbrains.annotations.Nullable;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = RoleGroup.Builder.class)
+public final class RoleGroup {
+    private final String id;
+
+    private final String name;
+
+    private final Optional<String> externalId;
+
+    private final Optional<String> connectionId;
+
+    private final OptionalNullable<String> organizationId;
+
+    private final Optional<String> tenantName;
+
+    private final OptionalNullable<String> description;
+
+    private final Optional<OffsetDateTime> createdAt;
+
+    private final Optional<OffsetDateTime> updatedAt;
+
+    private final Map<String, Object> additionalProperties;
+
+    private RoleGroup(
+            String id,
+            String name,
+            Optional<String> externalId,
+            Optional<String> connectionId,
+            OptionalNullable<String> organizationId,
+            Optional<String> tenantName,
+            OptionalNullable<String> description,
+            Optional<OffsetDateTime> createdAt,
+            Optional<OffsetDateTime> updatedAt,
+            Map<String, Object> additionalProperties) {
+        this.id = id;
+        this.name = name;
+        this.externalId = externalId;
+        this.connectionId = connectionId;
+        this.organizationId = organizationId;
+        this.tenantName = tenantName;
+        this.description = description;
+        this.createdAt = createdAt;
+        this.updatedAt = updatedAt;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return Unique identifier for the group (service-generated).
+     */
+    @JsonProperty("id")
+    public String getId() {
+        return id;
+    }
+
+    /**
+     * @return Name of the group. Must be unique within its connection. Must contain between 1 and 128 printable ASCII characters.
+     */
+    @JsonProperty("name")
+    public String getName() {
+        return name;
+    }
+
+    /**
+     * @return External identifier for the group, often used for SCIM synchronization. Max length of 256 characters.
+     */
+    @JsonProperty("external_id")
+    public Optional<String> getExternalId() {
+        return externalId;
+    }
+
+    /**
+     * @return Identifier for the connection this group belongs to (if a connection group).
+     */
+    @JsonProperty("connection_id")
+    public Optional<String> getConnectionId() {
+        return connectionId;
+    }
+
+    /**
+     * @return Identifier for the organization this group belongs to (if an organization group).
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("organization_id")
+    public OptionalNullable<String> getOrganizationId() {
+        if (organizationId == null) {
+            return OptionalNullable.absent();
+        }
+        return organizationId;
+    }
+
+    /**
+     * @return Identifier for the tenant this group belongs to.
+     */
+    @JsonProperty("tenant_name")
+    public Optional<String> getTenantName() {
+        return tenantName;
+    }
+
+    /**
+     * @return Description of the group.
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("description")
+    public OptionalNullable<String> getDescription() {
+        if (description == null) {
+            return OptionalNullable.absent();
+        }
+        return description;
+    }
+
+    /**
+     * @return Timestamp of when the group was created.
+     */
+    @JsonProperty("created_at")
+    public Optional<OffsetDateTime> getCreatedAt() {
+        return createdAt;
+    }
+
+    /**
+     * @return Timestamp of when the group was last updated.
+     */
+    @JsonProperty("updated_at")
+    public Optional<OffsetDateTime> getUpdatedAt() {
+        return updatedAt;
+    }
+
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("organization_id")
+    private OptionalNullable<String> _getOrganizationId() {
+        return organizationId;
+    }
+
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("description")
+    private OptionalNullable<String> _getDescription() {
+        return description;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof RoleGroup && equalTo((RoleGroup) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(RoleGroup other) {
+        return id.equals(other.id)
+                && name.equals(other.name)
+                && externalId.equals(other.externalId)
+                && connectionId.equals(other.connectionId)
+                && organizationId.equals(other.organizationId)
+                && tenantName.equals(other.tenantName)
+                && description.equals(other.description)
+                && createdAt.equals(other.createdAt)
+                && updatedAt.equals(other.updatedAt);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(
+                this.id,
+                this.name,
+                this.externalId,
+                this.connectionId,
+                this.organizationId,
+                this.tenantName,
+                this.description,
+                this.createdAt,
+                this.updatedAt);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static IdStage builder() {
+        return new Builder();
+    }
+
+    public interface IdStage {
+        /**
+         * <p>Unique identifier for the group (service-generated).</p>
+         */
+        NameStage id(@NotNull String id);
+
+        Builder from(RoleGroup other);
+    }
+
+    public interface NameStage {
+        /**
+         * <p>Name of the group. Must be unique within its connection. Must contain between 1 and 128 printable ASCII characters.</p>
+         */
+        _FinalStage name(@NotNull String name);
+    }
+
+    public interface _FinalStage {
+        RoleGroup build();
+
+        _FinalStage additionalProperty(String key, Object value);
+
+        _FinalStage additionalProperties(Map<String, Object> additionalProperties);
+
+        /**
+         * <p>External identifier for the group, often used for SCIM synchronization. Max length of 256 characters.</p>
+         */
+        _FinalStage externalId(Optional<String> externalId);
+
+        _FinalStage externalId(String externalId);
+
+        /**
+         * <p>Identifier for the connection this group belongs to (if a connection group).</p>
+         */
+        _FinalStage connectionId(Optional<String> connectionId);
+
+        _FinalStage connectionId(String connectionId);
+
+        /**
+         * <p>Identifier for the organization this group belongs to (if an organization group).</p>
+         */
+        _FinalStage organizationId(@Nullable OptionalNullable<String> organizationId);
+
+        _FinalStage organizationId(String organizationId);
+
+        _FinalStage organizationId(Optional<String> organizationId);
+
+        _FinalStage organizationId(com.auth0.client.mgmt.core.Nullable<String> organizationId);
+
+        /**
+         * <p>Identifier for the tenant this group belongs to.</p>
+         */
+        _FinalStage tenantName(Optional<String> tenantName);
+
+        _FinalStage tenantName(String tenantName);
+
+        /**
+         * <p>Description of the group.</p>
+         */
+        _FinalStage description(@Nullable OptionalNullable<String> description);
+
+        _FinalStage description(String description);
+
+        _FinalStage description(Optional<String> description);
+
+        _FinalStage description(com.auth0.client.mgmt.core.Nullable<String> description);
+
+        /**
+         * <p>Timestamp of when the group was created.</p>
+         */
+        _FinalStage createdAt(Optional<OffsetDateTime> createdAt);
+
+        _FinalStage createdAt(OffsetDateTime createdAt);
+
+        /**
+         * <p>Timestamp of when the group was last updated.</p>
+         */
+        _FinalStage updatedAt(Optional<OffsetDateTime> updatedAt);
+
+        _FinalStage updatedAt(OffsetDateTime updatedAt);
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder implements IdStage, NameStage, _FinalStage {
+        private String id;
+
+        private String name;
+
+        private Optional<OffsetDateTime> updatedAt = Optional.empty();
+
+        private Optional<OffsetDateTime> createdAt = Optional.empty();
+
+        private OptionalNullable<String> description = OptionalNullable.absent();
+
+        private Optional<String> tenantName = Optional.empty();
+
+        private OptionalNullable<String> organizationId = OptionalNullable.absent();
+
+        private Optional<String> connectionId = Optional.empty();
+
+        private Optional<String> externalId = Optional.empty();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        @java.lang.Override
+        public Builder from(RoleGroup other) {
+            id(other.getId());
+            name(other.getName());
+            externalId(other.getExternalId());
+            connectionId(other.getConnectionId());
+            organizationId(other.getOrganizationId());
+            tenantName(other.getTenantName());
+            description(other.getDescription());
+            createdAt(other.getCreatedAt());
+            updatedAt(other.getUpdatedAt());
+            return this;
+        }
+
+        /**
+         * <p>Unique identifier for the group (service-generated).</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        @JsonSetter("id")
+        public NameStage id(@NotNull String id) {
+            this.id = Objects.requireNonNull(id, "id must not be null");
+            return this;
+        }
+
+        /**
+         * <p>Name of the group. Must be unique within its connection. Must contain between 1 and 128 printable ASCII characters.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        @JsonSetter("name")
+        public _FinalStage name(@NotNull String name) {
+            this.name = Objects.requireNonNull(name, "name must not be null");
+            return this;
+        }
+
+        /**
+         * <p>Timestamp of when the group was last updated.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage updatedAt(OffsetDateTime updatedAt) {
+            this.updatedAt = Optional.ofNullable(updatedAt);
+            return this;
+        }
+
+        /**
+         * <p>Timestamp of when the group was last updated.</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "updated_at", nulls = Nulls.SKIP)
+        public _FinalStage updatedAt(Optional<OffsetDateTime> updatedAt) {
+            this.updatedAt = updatedAt;
+            return this;
+        }
+
+        /**
+         * <p>Timestamp of when the group was created.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage createdAt(OffsetDateTime createdAt) {
+            this.createdAt = Optional.ofNullable(createdAt);
+            return this;
+        }
+
+        /**
+         * <p>Timestamp of when the group was created.</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "created_at", nulls = Nulls.SKIP)
+        public _FinalStage createdAt(Optional<OffsetDateTime> createdAt) {
+            this.createdAt = createdAt;
+            return this;
+        }
+
+        /**
+         * <p>Description of the group.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage description(com.auth0.client.mgmt.core.Nullable<String> description) {
+            if (description.isNull()) {
+                this.description = OptionalNullable.ofNull();
+            } else if (description.isEmpty()) {
+                this.description = OptionalNullable.absent();
+            } else {
+                this.description = OptionalNullable.of(description.get());
+            }
+            return this;
+        }
+
+        /**
+         * <p>Description of the group.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage description(Optional<String> description) {
+            if (description.isPresent()) {
+                this.description = OptionalNullable.of(description.get());
+            } else {
+                this.description = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        /**
+         * <p>Description of the group.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage description(String description) {
+            this.description = OptionalNullable.of(description);
+            return this;
+        }
+
+        /**
+         * <p>Description of the group.</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "description", nulls = Nulls.SKIP)
+        public _FinalStage description(@Nullable OptionalNullable<String> description) {
+            this.description = description;
+            return this;
+        }
+
+        /**
+         * <p>Identifier for the tenant this group belongs to.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage tenantName(String tenantName) {
+            this.tenantName = Optional.ofNullable(tenantName);
+            return this;
+        }
+
+        /**
+         * <p>Identifier for the tenant this group belongs to.</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "tenant_name", nulls = Nulls.SKIP)
+        public _FinalStage tenantName(Optional<String> tenantName) {
+            this.tenantName = tenantName;
+            return this;
+        }
+
+        /**
+         * <p>Identifier for the organization this group belongs to (if an organization group).</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage organizationId(com.auth0.client.mgmt.core.Nullable<String> organizationId) {
+            if (organizationId.isNull()) {
+                this.organizationId = OptionalNullable.ofNull();
+            } else if (organizationId.isEmpty()) {
+                this.organizationId = OptionalNullable.absent();
+            } else {
+                this.organizationId = OptionalNullable.of(organizationId.get());
+            }
+            return this;
+        }
+
+        /**
+         * <p>Identifier for the organization this group belongs to (if an organization group).</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage organizationId(Optional<String> organizationId) {
+            if (organizationId.isPresent()) {
+                this.organizationId = OptionalNullable.of(organizationId.get());
+            } else {
+                this.organizationId = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        /**
+         * <p>Identifier for the organization this group belongs to (if an organization group).</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage organizationId(String organizationId) {
+            this.organizationId = OptionalNullable.of(organizationId);
+            return this;
+        }
+
+        /**
+         * <p>Identifier for the organization this group belongs to (if an organization group).</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "organization_id", nulls = Nulls.SKIP)
+        public _FinalStage organizationId(@Nullable OptionalNullable<String> organizationId) {
+            this.organizationId = organizationId;
+            return this;
+        }
+
+        /**
+         * <p>Identifier for the connection this group belongs to (if a connection group).</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage connectionId(String connectionId) {
+            this.connectionId = Optional.ofNullable(connectionId);
+            return this;
+        }
+
+        /**
+         * <p>Identifier for the connection this group belongs to (if a connection group).</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "connection_id", nulls = Nulls.SKIP)
+        public _FinalStage connectionId(Optional<String> connectionId) {
+            this.connectionId = connectionId;
+            return this;
+        }
+
+        /**
+         * <p>External identifier for the group, often used for SCIM synchronization. Max length of 256 characters.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage externalId(String externalId) {
+            this.externalId = Optional.ofNullable(externalId);
+            return this;
+        }
+
+        /**
+         * <p>External identifier for the group, often used for SCIM synchronization. Max length of 256 characters.</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "external_id", nulls = Nulls.SKIP)
+        public _FinalStage externalId(Optional<String> externalId) {
+            this.externalId = externalId;
+            return this;
+        }
+
+        @java.lang.Override
+        public RoleGroup build() {
+            return new RoleGroup(
+                    id,
+                    name,
+                    externalId,
+                    connectionId,
+                    organizationId,
+                    tenantName,
+                    description,
+                    createdAt,
+                    updatedAt,
+                    additionalProperties);
+        }
+
+        @java.lang.Override
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        @java.lang.Override
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/RoleTypeEnum.java b/src/main/java/com/auth0/client/mgmt/types/RoleTypeEnum.java
new file mode 100644
index 00000000..e64e43fc
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/RoleTypeEnum.java
@@ -0,0 +1,82 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.fasterxml.jackson.annotation.JsonCreator;
+import com.fasterxml.jackson.annotation.JsonValue;
+
+public final class RoleTypeEnum {
+    public static final RoleTypeEnum TENANT = new RoleTypeEnum(Value.TENANT, "tenant");
+
+    public static final RoleTypeEnum ORGANIZATION = new RoleTypeEnum(Value.ORGANIZATION, "organization");
+
+    private final Value value;
+
+    private final String string;
+
+    RoleTypeEnum(Value value, String string) {
+        this.value = value;
+        this.string = string;
+    }
+
+    public Value getEnumValue() {
+        return value;
+    }
+
+    @java.lang.Override
+    @JsonValue
+    public String toString() {
+        return this.string;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        return (this == other) || (other instanceof RoleTypeEnum && this.string.equals(((RoleTypeEnum) other).string));
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return this.string.hashCode();
+    }
+
+    public <T> T visit(Visitor<T> visitor) {
+        switch (value) {
+            case TENANT:
+                return visitor.visitTenant();
+            case ORGANIZATION:
+                return visitor.visitOrganization();
+            case UNKNOWN:
+            default:
+                return visitor.visitUnknown(string);
+        }
+    }
+
+    @JsonCreator(mode = JsonCreator.Mode.DELEGATING)
+    public static RoleTypeEnum valueOf(String value) {
+        switch (value) {
+            case "tenant":
+                return TENANT;
+            case "organization":
+                return ORGANIZATION;
+            default:
+                return new RoleTypeEnum(Value.UNKNOWN, value);
+        }
+    }
+
+    public enum Value {
+        TENANT,
+
+        ORGANIZATION,
+
+        UNKNOWN
+    }
+
+    public interface Visitor<T> {
+        T visitTenant();
+
+        T visitOrganization();
+
+        T visitUnknown(String unknownType);
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/SelfServiceProfileSsoTicketGoogleWorkspaceConfig.java b/src/main/java/com/auth0/client/mgmt/types/SelfServiceProfileSsoTicketGoogleWorkspaceConfig.java
index b77349d7..fdacf54b 100644
--- a/src/main/java/com/auth0/client/mgmt/types/SelfServiceProfileSsoTicketGoogleWorkspaceConfig.java
+++ b/src/main/java/com/auth0/client/mgmt/types/SelfServiceProfileSsoTicketGoogleWorkspaceConfig.java
@@ -10,21 +10,26 @@
 import com.fasterxml.jackson.annotation.JsonInclude;
 import com.fasterxml.jackson.annotation.JsonProperty;
 import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
 import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
 import java.util.HashMap;
 import java.util.Map;
 import java.util.Objects;
+import java.util.Optional;
 
 @JsonInclude(JsonInclude.Include.NON_ABSENT)
 @JsonDeserialize(builder = SelfServiceProfileSsoTicketGoogleWorkspaceConfig.Builder.class)
 public final class SelfServiceProfileSsoTicketGoogleWorkspaceConfig {
     private final boolean syncUsers;
 
+    private final Optional<Boolean> syncGroups;
+
     private final Map<String, Object> additionalProperties;
 
     private SelfServiceProfileSsoTicketGoogleWorkspaceConfig(
-            boolean syncUsers, Map<String, Object> additionalProperties) {
+            boolean syncUsers, Optional<Boolean> syncGroups, Map<String, Object> additionalProperties) {
         this.syncUsers = syncUsers;
+        this.syncGroups = syncGroups;
         this.additionalProperties = additionalProperties;
     }
 
@@ -36,6 +41,14 @@ public boolean getSyncUsers() {
         return syncUsers;
     }
 
+    /**
+     * @return Whether to enable Google Workspace Directory Sync for groups during the self-service flow.
+     */
+    @JsonProperty("sync_groups")
+    public Optional<Boolean> getSyncGroups() {
+        return syncGroups;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -49,12 +62,12 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(SelfServiceProfileSsoTicketGoogleWorkspaceConfig other) {
-        return syncUsers == other.syncUsers;
+        return syncUsers == other.syncUsers && syncGroups.equals(other.syncGroups);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.syncUsers);
+        return Objects.hash(this.syncUsers, this.syncGroups);
     }
 
     @java.lang.Override
@@ -81,12 +94,21 @@ public interface _FinalStage {
         _FinalStage additionalProperty(String key, Object value);
 
         _FinalStage additionalProperties(Map<String, Object> additionalProperties);
+
+        /**
+         * <p>Whether to enable Google Workspace Directory Sync for groups during the self-service flow.</p>
+         */
+        _FinalStage syncGroups(Optional<Boolean> syncGroups);
+
+        _FinalStage syncGroups(Boolean syncGroups);
     }
 
     @JsonIgnoreProperties(ignoreUnknown = true)
     public static final class Builder implements SyncUsersStage, _FinalStage {
         private boolean syncUsers;
 
+        private Optional<Boolean> syncGroups = Optional.empty();
+
         @JsonAnySetter
         private Map<String, Object> additionalProperties = new HashMap<>();
 
@@ -95,6 +117,7 @@ private Builder() {}
         @java.lang.Override
         public Builder from(SelfServiceProfileSsoTicketGoogleWorkspaceConfig other) {
             syncUsers(other.getSyncUsers());
+            syncGroups(other.getSyncGroups());
             return this;
         }
 
@@ -109,9 +132,29 @@ public _FinalStage syncUsers(boolean syncUsers) {
             return this;
         }
 
+        /**
+         * <p>Whether to enable Google Workspace Directory Sync for groups during the self-service flow.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage syncGroups(Boolean syncGroups) {
+            this.syncGroups = Optional.ofNullable(syncGroups);
+            return this;
+        }
+
+        /**
+         * <p>Whether to enable Google Workspace Directory Sync for groups during the self-service flow.</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "sync_groups", nulls = Nulls.SKIP)
+        public _FinalStage syncGroups(Optional<Boolean> syncGroups) {
+            this.syncGroups = syncGroups;
+            return this;
+        }
+
         @java.lang.Override
         public SelfServiceProfileSsoTicketGoogleWorkspaceConfig build() {
-            return new SelfServiceProfileSsoTicketGoogleWorkspaceConfig(syncUsers, additionalProperties);
+            return new SelfServiceProfileSsoTicketGoogleWorkspaceConfig(syncUsers, syncGroups, additionalProperties);
         }
 
         @java.lang.Override
diff --git a/src/main/java/com/auth0/client/mgmt/types/SynchronizedGroupPayload.java b/src/main/java/com/auth0/client/mgmt/types/SynchronizedGroupPayload.java
index d46e13a4..f3275396 100644
--- a/src/main/java/com/auth0/client/mgmt/types/SynchronizedGroupPayload.java
+++ b/src/main/java/com/auth0/client/mgmt/types/SynchronizedGroupPayload.java
@@ -10,10 +10,12 @@
 import com.fasterxml.jackson.annotation.JsonInclude;
 import com.fasterxml.jackson.annotation.JsonProperty;
 import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
 import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
 import java.util.HashMap;
 import java.util.Map;
 import java.util.Objects;
+import java.util.Optional;
 import org.jetbrains.annotations.NotNull;
 
 @JsonInclude(JsonInclude.Include.NON_ABSENT)
@@ -21,10 +23,24 @@
 public final class SynchronizedGroupPayload {
     private final String id;
 
+    private final Optional<String> name;
+
+    private final Optional<String> email;
+
+    private final Optional<Integer> directMembersCount;
+
     private final Map<String, Object> additionalProperties;
 
-    private SynchronizedGroupPayload(String id, Map<String, Object> additionalProperties) {
+    private SynchronizedGroupPayload(
+            String id,
+            Optional<String> name,
+            Optional<String> email,
+            Optional<Integer> directMembersCount,
+            Map<String, Object> additionalProperties) {
         this.id = id;
+        this.name = name;
+        this.email = email;
+        this.directMembersCount = directMembersCount;
         this.additionalProperties = additionalProperties;
     }
 
@@ -36,6 +52,30 @@ public String getId() {
         return id;
     }
 
+    /**
+     * @return Google Workspace Directory group name.
+     */
+    @JsonProperty("name")
+    public Optional<String> getName() {
+        return name;
+    }
+
+    /**
+     * @return Google Workspace Directory group email.
+     */
+    @JsonProperty("email")
+    public Optional<String> getEmail() {
+        return email;
+    }
+
+    /**
+     * @return Number of direct members in the Google Workspace Directory group.
+     */
+    @JsonProperty("direct_members_count")
+    public Optional<Integer> getDirectMembersCount() {
+        return directMembersCount;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -48,12 +88,15 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(SynchronizedGroupPayload other) {
-        return id.equals(other.id);
+        return id.equals(other.id)
+                && name.equals(other.name)
+                && email.equals(other.email)
+                && directMembersCount.equals(other.directMembersCount);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.id);
+        return Objects.hash(this.id, this.name, this.email, this.directMembersCount);
     }
 
     @java.lang.Override
@@ -80,12 +123,39 @@ public interface _FinalStage {
         _FinalStage additionalProperty(String key, Object value);
 
         _FinalStage additionalProperties(Map<String, Object> additionalProperties);
+
+        /**
+         * <p>Google Workspace Directory group name.</p>
+         */
+        _FinalStage name(Optional<String> name);
+
+        _FinalStage name(String name);
+
+        /**
+         * <p>Google Workspace Directory group email.</p>
+         */
+        _FinalStage email(Optional<String> email);
+
+        _FinalStage email(String email);
+
+        /**
+         * <p>Number of direct members in the Google Workspace Directory group.</p>
+         */
+        _FinalStage directMembersCount(Optional<Integer> directMembersCount);
+
+        _FinalStage directMembersCount(Integer directMembersCount);
     }
 
     @JsonIgnoreProperties(ignoreUnknown = true)
     public static final class Builder implements IdStage, _FinalStage {
         private String id;
 
+        private Optional<Integer> directMembersCount = Optional.empty();
+
+        private Optional<String> email = Optional.empty();
+
+        private Optional<String> name = Optional.empty();
+
         @JsonAnySetter
         private Map<String, Object> additionalProperties = new HashMap<>();
 
@@ -94,6 +164,9 @@ private Builder() {}
         @java.lang.Override
         public Builder from(SynchronizedGroupPayload other) {
             id(other.getId());
+            name(other.getName());
+            email(other.getEmail());
+            directMembersCount(other.getDirectMembersCount());
             return this;
         }
 
@@ -108,9 +181,69 @@ public _FinalStage id(@NotNull String id) {
             return this;
         }
 
+        /**
+         * <p>Number of direct members in the Google Workspace Directory group.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage directMembersCount(Integer directMembersCount) {
+            this.directMembersCount = Optional.ofNullable(directMembersCount);
+            return this;
+        }
+
+        /**
+         * <p>Number of direct members in the Google Workspace Directory group.</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "direct_members_count", nulls = Nulls.SKIP)
+        public _FinalStage directMembersCount(Optional<Integer> directMembersCount) {
+            this.directMembersCount = directMembersCount;
+            return this;
+        }
+
+        /**
+         * <p>Google Workspace Directory group email.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage email(String email) {
+            this.email = Optional.ofNullable(email);
+            return this;
+        }
+
+        /**
+         * <p>Google Workspace Directory group email.</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "email", nulls = Nulls.SKIP)
+        public _FinalStage email(Optional<String> email) {
+            this.email = email;
+            return this;
+        }
+
+        /**
+         * <p>Google Workspace Directory group name.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        public _FinalStage name(String name) {
+            this.name = Optional.ofNullable(name);
+            return this;
+        }
+
+        /**
+         * <p>Google Workspace Directory group name.</p>
+         */
+        @java.lang.Override
+        @JsonSetter(value = "name", nulls = Nulls.SKIP)
+        public _FinalStage name(Optional<String> name) {
+            this.name = name;
+            return this;
+        }
+
         @java.lang.Override
         public SynchronizedGroupPayload build() {
-            return new SynchronizedGroupPayload(id, additionalProperties);
+            return new SynchronizedGroupPayload(id, name, email, directMembersCount, additionalProperties);
         }
 
         @java.lang.Override
diff --git a/src/main/java/com/auth0/client/mgmt/types/SynchronizedGroupSelectionId.java b/src/main/java/com/auth0/client/mgmt/types/SynchronizedGroupSelectionId.java
new file mode 100644
index 00000000..aed19ce8
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/SynchronizedGroupSelectionId.java
@@ -0,0 +1,128 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Objects;
+import org.jetbrains.annotations.NotNull;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = SynchronizedGroupSelectionId.Builder.class)
+public final class SynchronizedGroupSelectionId {
+    private final String id;
+
+    private final Map<String, Object> additionalProperties;
+
+    private SynchronizedGroupSelectionId(String id, Map<String, Object> additionalProperties) {
+        this.id = id;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return Google Workspace Directory group ID.
+     */
+    @JsonProperty("id")
+    public String getId() {
+        return id;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof SynchronizedGroupSelectionId && equalTo((SynchronizedGroupSelectionId) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(SynchronizedGroupSelectionId other) {
+        return id.equals(other.id);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.id);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static IdStage builder() {
+        return new Builder();
+    }
+
+    public interface IdStage {
+        /**
+         * <p>Google Workspace Directory group ID.</p>
+         */
+        _FinalStage id(@NotNull String id);
+
+        Builder from(SynchronizedGroupSelectionId other);
+    }
+
+    public interface _FinalStage {
+        SynchronizedGroupSelectionId build();
+
+        _FinalStage additionalProperty(String key, Object value);
+
+        _FinalStage additionalProperties(Map<String, Object> additionalProperties);
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder implements IdStage, _FinalStage {
+        private String id;
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        @java.lang.Override
+        public Builder from(SynchronizedGroupSelectionId other) {
+            id(other.getId());
+            return this;
+        }
+
+        /**
+         * <p>Google Workspace Directory group ID.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        @JsonSetter("id")
+        public _FinalStage id(@NotNull String id) {
+            this.id = Objects.requireNonNull(id, "id must not be null");
+            return this;
+        }
+
+        @java.lang.Override
+        public SynchronizedGroupSelectionId build() {
+            return new SynchronizedGroupSelectionId(id, additionalProperties);
+        }
+
+        @java.lang.Override
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        @java.lang.Override
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/UpdateOrganizationClientResponseContent.java b/src/main/java/com/auth0/client/mgmt/types/UpdateOrganizationClientResponseContent.java
new file mode 100644
index 00000000..060ae704
--- /dev/null
+++ b/src/main/java/com/auth0/client/mgmt/types/UpdateOrganizationClientResponseContent.java
@@ -0,0 +1,198 @@
+/**
+ * This file was auto-generated by Fern from our API Definition.
+ */
+package com.auth0.client.mgmt.types;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.fasterxml.jackson.annotation.JsonAnyGetter;
+import com.fasterxml.jackson.annotation.JsonAnySetter;
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.annotation.JsonInclude;
+import com.fasterxml.jackson.annotation.JsonProperty;
+import com.fasterxml.jackson.annotation.JsonSetter;
+import com.fasterxml.jackson.annotation.Nulls;
+import com.fasterxml.jackson.databind.annotation.JsonDeserialize;
+import java.util.HashMap;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Optional;
+import org.jetbrains.annotations.NotNull;
+
+@JsonInclude(JsonInclude.Include.NON_ABSENT)
+@JsonDeserialize(builder = UpdateOrganizationClientResponseContent.Builder.class)
+public final class UpdateOrganizationClientResponseContent {
+    private final String clientId;
+
+    private final boolean useForMemberAccess;
+
+    private final Optional<OrganizationClientMetadata> client;
+
+    private final Map<String, Object> additionalProperties;
+
+    private UpdateOrganizationClientResponseContent(
+            String clientId,
+            boolean useForMemberAccess,
+            Optional<OrganizationClientMetadata> client,
+            Map<String, Object> additionalProperties) {
+        this.clientId = clientId;
+        this.useForMemberAccess = useForMemberAccess;
+        this.client = client;
+        this.additionalProperties = additionalProperties;
+    }
+
+    /**
+     * @return The identifier of the client associated with the organization.
+     */
+    @JsonProperty("client_id")
+    public String getClientId() {
+        return clientId;
+    }
+
+    /**
+     * @return Whether this client is used for member access to the organization.
+     */
+    @JsonProperty("use_for_member_access")
+    public boolean getUseForMemberAccess() {
+        return useForMemberAccess;
+    }
+
+    @JsonProperty("client")
+    public Optional<OrganizationClientMetadata> getClient() {
+        return client;
+    }
+
+    @java.lang.Override
+    public boolean equals(Object other) {
+        if (this == other) return true;
+        return other instanceof UpdateOrganizationClientResponseContent
+                && equalTo((UpdateOrganizationClientResponseContent) other);
+    }
+
+    @JsonAnyGetter
+    public Map<String, Object> getAdditionalProperties() {
+        return this.additionalProperties;
+    }
+
+    private boolean equalTo(UpdateOrganizationClientResponseContent other) {
+        return clientId.equals(other.clientId)
+                && useForMemberAccess == other.useForMemberAccess
+                && client.equals(other.client);
+    }
+
+    @java.lang.Override
+    public int hashCode() {
+        return Objects.hash(this.clientId, this.useForMemberAccess, this.client);
+    }
+
+    @java.lang.Override
+    public String toString() {
+        return ObjectMappers.stringify(this);
+    }
+
+    public static ClientIdStage builder() {
+        return new Builder();
+    }
+
+    public interface ClientIdStage {
+        /**
+         * <p>The identifier of the client associated with the organization.</p>
+         */
+        UseForMemberAccessStage clientId(@NotNull String clientId);
+
+        Builder from(UpdateOrganizationClientResponseContent other);
+    }
+
+    public interface UseForMemberAccessStage {
+        /**
+         * <p>Whether this client is used for member access to the organization.</p>
+         */
+        _FinalStage useForMemberAccess(boolean useForMemberAccess);
+    }
+
+    public interface _FinalStage {
+        UpdateOrganizationClientResponseContent build();
+
+        _FinalStage additionalProperty(String key, Object value);
+
+        _FinalStage additionalProperties(Map<String, Object> additionalProperties);
+
+        _FinalStage client(Optional<OrganizationClientMetadata> client);
+
+        _FinalStage client(OrganizationClientMetadata client);
+    }
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public static final class Builder implements ClientIdStage, UseForMemberAccessStage, _FinalStage {
+        private String clientId;
+
+        private boolean useForMemberAccess;
+
+        private Optional<OrganizationClientMetadata> client = Optional.empty();
+
+        @JsonAnySetter
+        private Map<String, Object> additionalProperties = new HashMap<>();
+
+        private Builder() {}
+
+        @java.lang.Override
+        public Builder from(UpdateOrganizationClientResponseContent other) {
+            clientId(other.getClientId());
+            useForMemberAccess(other.getUseForMemberAccess());
+            client(other.getClient());
+            return this;
+        }
+
+        /**
+         * <p>The identifier of the client associated with the organization.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        @JsonSetter("client_id")
+        public UseForMemberAccessStage clientId(@NotNull String clientId) {
+            this.clientId = Objects.requireNonNull(clientId, "clientId must not be null");
+            return this;
+        }
+
+        /**
+         * <p>Whether this client is used for member access to the organization.</p>
+         * @return Reference to {@code this} so that method calls can be chained together.
+         */
+        @java.lang.Override
+        @JsonSetter("use_for_member_access")
+        public _FinalStage useForMemberAccess(boolean useForMemberAccess) {
+            this.useForMemberAccess = useForMemberAccess;
+            return this;
+        }
+
+        @java.lang.Override
+        public _FinalStage client(OrganizationClientMetadata client) {
+            this.client = Optional.ofNullable(client);
+            return this;
+        }
+
+        @java.lang.Override
+        @JsonSetter(value = "client", nulls = Nulls.SKIP)
+        public _FinalStage client(Optional<OrganizationClientMetadata> client) {
+            this.client = client;
+            return this;
+        }
+
+        @java.lang.Override
+        public UpdateOrganizationClientResponseContent build() {
+            return new UpdateOrganizationClientResponseContent(
+                    clientId, useForMemberAccess, client, additionalProperties);
+        }
+
+        @java.lang.Override
+        public Builder additionalProperty(String key, Object value) {
+            this.additionalProperties.put(key, value);
+            return this;
+        }
+
+        @java.lang.Override
+        public Builder additionalProperties(Map<String, Object> additionalProperties) {
+            this.additionalProperties.putAll(additionalProperties);
+            return this;
+        }
+    }
+}
diff --git a/src/main/java/com/auth0/client/mgmt/types/UpdateOrganizationRequestContent.java b/src/main/java/com/auth0/client/mgmt/types/UpdateOrganizationRequestContent.java
index e7395296..bcf96603 100644
--- a/src/main/java/com/auth0/client/mgmt/types/UpdateOrganizationRequestContent.java
+++ b/src/main/java/com/auth0/client/mgmt/types/UpdateOrganizationRequestContent.java
@@ -35,6 +35,8 @@ public final class UpdateOrganizationRequestContent {
 
     private final Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess;
 
+    private final Optional<Boolean> isAppEntitlementActive;
+
     private final Map<String, Object> additionalProperties;
 
     private UpdateOrganizationRequestContent(
@@ -44,6 +46,7 @@ private UpdateOrganizationRequestContent(
             Optional<Map<String, OptionalNullable<String>>> metadata,
             OptionalNullable<UpdateTokenQuota> tokenQuota,
             Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess,
+            Optional<Boolean> isAppEntitlementActive,
             Map<String, Object> additionalProperties) {
         this.displayName = displayName;
         this.name = name;
@@ -51,6 +54,7 @@ private UpdateOrganizationRequestContent(
         this.metadata = metadata;
         this.tokenQuota = tokenQuota;
         this.thirdPartyClientAccess = thirdPartyClientAccess;
+        this.isAppEntitlementActive = isAppEntitlementActive;
         this.additionalProperties = additionalProperties;
     }
 
@@ -94,6 +98,14 @@ public Optional<OrganizationThirdPartyClientAccessEnum> getThirdPartyClientAcces
         return thirdPartyClientAccess;
     }
 
+    /**
+     * @return Whether app entitlement is active for this organization.
+     */
+    @JsonProperty("is_app_entitlement_active")
+    public Optional<Boolean> getIsAppEntitlementActive() {
+        return isAppEntitlementActive;
+    }
+
     @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
     @JsonProperty("token_quota")
     private OptionalNullable<UpdateTokenQuota> _getTokenQuota() {
@@ -117,7 +129,8 @@ private boolean equalTo(UpdateOrganizationRequestContent other) {
                 && branding.equals(other.branding)
                 && metadata.equals(other.metadata)
                 && tokenQuota.equals(other.tokenQuota)
-                && thirdPartyClientAccess.equals(other.thirdPartyClientAccess);
+                && thirdPartyClientAccess.equals(other.thirdPartyClientAccess)
+                && isAppEntitlementActive.equals(other.isAppEntitlementActive);
     }
 
     @java.lang.Override
@@ -128,7 +141,8 @@ public int hashCode() {
                 this.branding,
                 this.metadata,
                 this.tokenQuota,
-                this.thirdPartyClientAccess);
+                this.thirdPartyClientAccess,
+                this.isAppEntitlementActive);
     }
 
     @java.lang.Override
@@ -154,6 +168,8 @@ public static final class Builder {
 
         private Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess = Optional.empty();
 
+        private Optional<Boolean> isAppEntitlementActive = Optional.empty();
+
         @JsonAnySetter
         private Map<String, Object> additionalProperties = new HashMap<>();
 
@@ -166,6 +182,7 @@ public Builder from(UpdateOrganizationRequestContent other) {
             metadata(other.getMetadata());
             tokenQuota(other.getTokenQuota());
             thirdPartyClientAccess(other.getThirdPartyClientAccess());
+            isAppEntitlementActive(other.getIsAppEntitlementActive());
             return this;
         }
 
@@ -261,9 +278,30 @@ public Builder thirdPartyClientAccess(OrganizationThirdPartyClientAccessEnum thi
             return this;
         }
 
+        /**
+         * <p>Whether app entitlement is active for this organization.</p>
+         */
+        @JsonSetter(value = "is_app_entitlement_active", nulls = Nulls.SKIP)
+        public Builder isAppEntitlementActive(Optional<Boolean> isAppEntitlementActive) {
+            this.isAppEntitlementActive = isAppEntitlementActive;
+            return this;
+        }
+
+        public Builder isAppEntitlementActive(Boolean isAppEntitlementActive) {
+            this.isAppEntitlementActive = Optional.ofNullable(isAppEntitlementActive);
+            return this;
+        }
+
         public UpdateOrganizationRequestContent build() {
             return new UpdateOrganizationRequestContent(
-                    displayName, name, branding, metadata, tokenQuota, thirdPartyClientAccess, additionalProperties);
+                    displayName,
+                    name,
+                    branding,
+                    metadata,
+                    tokenQuota,
+                    thirdPartyClientAccess,
+                    isAppEntitlementActive,
+                    additionalProperties);
         }
 
         public Builder additionalProperty(String key, Object value) {
diff --git a/src/main/java/com/auth0/client/mgmt/types/UpdateOrganizationResponseContent.java b/src/main/java/com/auth0/client/mgmt/types/UpdateOrganizationResponseContent.java
index 6c8c41eb..90550740 100644
--- a/src/main/java/com/auth0/client/mgmt/types/UpdateOrganizationResponseContent.java
+++ b/src/main/java/com/auth0/client/mgmt/types/UpdateOrganizationResponseContent.java
@@ -35,6 +35,10 @@ public final class UpdateOrganizationResponseContent {
 
     private final Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess;
 
+    private final Optional<Boolean> isAppEntitlementActive;
+
+    private final Optional<OrganizationClientAssociation> client;
+
     private final Map<String, Object> additionalProperties;
 
     private UpdateOrganizationResponseContent(
@@ -45,6 +49,8 @@ private UpdateOrganizationResponseContent(
             Optional<Map<String, OptionalNullable<String>>> metadata,
             Optional<TokenQuota> tokenQuota,
             Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess,
+            Optional<Boolean> isAppEntitlementActive,
+            Optional<OrganizationClientAssociation> client,
             Map<String, Object> additionalProperties) {
         this.id = id;
         this.name = name;
@@ -53,6 +59,8 @@ private UpdateOrganizationResponseContent(
         this.metadata = metadata;
         this.tokenQuota = tokenQuota;
         this.thirdPartyClientAccess = thirdPartyClientAccess;
+        this.isAppEntitlementActive = isAppEntitlementActive;
+        this.client = client;
         this.additionalProperties = additionalProperties;
     }
 
@@ -100,6 +108,19 @@ public Optional<OrganizationThirdPartyClientAccessEnum> getThirdPartyClientAcces
         return thirdPartyClientAccess;
     }
 
+    /**
+     * @return Whether app entitlement is active for this organization.
+     */
+    @JsonProperty("is_app_entitlement_active")
+    public Optional<Boolean> getIsAppEntitlementActive() {
+        return isAppEntitlementActive;
+    }
+
+    @JsonProperty("client")
+    public Optional<OrganizationClientAssociation> getClient() {
+        return client;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -118,7 +139,9 @@ private boolean equalTo(UpdateOrganizationResponseContent other) {
                 && branding.equals(other.branding)
                 && metadata.equals(other.metadata)
                 && tokenQuota.equals(other.tokenQuota)
-                && thirdPartyClientAccess.equals(other.thirdPartyClientAccess);
+                && thirdPartyClientAccess.equals(other.thirdPartyClientAccess)
+                && isAppEntitlementActive.equals(other.isAppEntitlementActive)
+                && client.equals(other.client);
     }
 
     @java.lang.Override
@@ -130,7 +153,9 @@ public int hashCode() {
                 this.branding,
                 this.metadata,
                 this.tokenQuota,
-                this.thirdPartyClientAccess);
+                this.thirdPartyClientAccess,
+                this.isAppEntitlementActive,
+                this.client);
     }
 
     @java.lang.Override
@@ -158,6 +183,10 @@ public static final class Builder {
 
         private Optional<OrganizationThirdPartyClientAccessEnum> thirdPartyClientAccess = Optional.empty();
 
+        private Optional<Boolean> isAppEntitlementActive = Optional.empty();
+
+        private Optional<OrganizationClientAssociation> client = Optional.empty();
+
         @JsonAnySetter
         private Map<String, Object> additionalProperties = new HashMap<>();
 
@@ -171,6 +200,8 @@ public Builder from(UpdateOrganizationResponseContent other) {
             metadata(other.getMetadata());
             tokenQuota(other.getTokenQuota());
             thirdPartyClientAccess(other.getThirdPartyClientAccess());
+            isAppEntitlementActive(other.getIsAppEntitlementActive());
+            client(other.getClient());
             return this;
         }
 
@@ -260,6 +291,31 @@ public Builder thirdPartyClientAccess(OrganizationThirdPartyClientAccessEnum thi
             return this;
         }
 
+        /**
+         * <p>Whether app entitlement is active for this organization.</p>
+         */
+        @JsonSetter(value = "is_app_entitlement_active", nulls = Nulls.SKIP)
+        public Builder isAppEntitlementActive(Optional<Boolean> isAppEntitlementActive) {
+            this.isAppEntitlementActive = isAppEntitlementActive;
+            return this;
+        }
+
+        public Builder isAppEntitlementActive(Boolean isAppEntitlementActive) {
+            this.isAppEntitlementActive = Optional.ofNullable(isAppEntitlementActive);
+            return this;
+        }
+
+        @JsonSetter(value = "client", nulls = Nulls.SKIP)
+        public Builder client(Optional<OrganizationClientAssociation> client) {
+            this.client = client;
+            return this;
+        }
+
+        public Builder client(OrganizationClientAssociation client) {
+            this.client = Optional.ofNullable(client);
+            return this;
+        }
+
         public UpdateOrganizationResponseContent build() {
             return new UpdateOrganizationResponseContent(
                     id,
@@ -269,6 +325,8 @@ public UpdateOrganizationResponseContent build() {
                     metadata,
                     tokenQuota,
                     thirdPartyClientAccess,
+                    isAppEntitlementActive,
+                    client,
                     additionalProperties);
         }
 
diff --git a/src/main/java/com/auth0/client/mgmt/types/UpdateRoleResponseContent.java b/src/main/java/com/auth0/client/mgmt/types/UpdateRoleResponseContent.java
index e2588ade..085f73fa 100644
--- a/src/main/java/com/auth0/client/mgmt/types/UpdateRoleResponseContent.java
+++ b/src/main/java/com/auth0/client/mgmt/types/UpdateRoleResponseContent.java
@@ -26,16 +26,24 @@ public final class UpdateRoleResponseContent {
 
     private final Optional<String> description;
 
+    private final Optional<RoleTypeEnum> type;
+
+    private final Optional<String> ownerId;
+
     private final Map<String, Object> additionalProperties;
 
     private UpdateRoleResponseContent(
             Optional<String> id,
             Optional<String> name,
             Optional<String> description,
+            Optional<RoleTypeEnum> type,
+            Optional<String> ownerId,
             Map<String, Object> additionalProperties) {
         this.id = id;
         this.name = name;
         this.description = description;
+        this.type = type;
+        this.ownerId = ownerId;
         this.additionalProperties = additionalProperties;
     }
 
@@ -63,6 +71,19 @@ public Optional<String> getDescription() {
         return description;
     }
 
+    @JsonProperty("type")
+    public Optional<RoleTypeEnum> getType() {
+        return type;
+    }
+
+    /**
+     * @return The id of the entity that owns this role, such as an organization id.
+     */
+    @JsonProperty("owner_id")
+    public Optional<String> getOwnerId() {
+        return ownerId;
+    }
+
     @java.lang.Override
     public boolean equals(Object other) {
         if (this == other) return true;
@@ -75,12 +96,16 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(UpdateRoleResponseContent other) {
-        return id.equals(other.id) && name.equals(other.name) && description.equals(other.description);
+        return id.equals(other.id)
+                && name.equals(other.name)
+                && description.equals(other.description)
+                && type.equals(other.type)
+                && ownerId.equals(other.ownerId);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.id, this.name, this.description);
+        return Objects.hash(this.id, this.name, this.description, this.type, this.ownerId);
     }
 
     @java.lang.Override
@@ -100,6 +125,10 @@ public static final class Builder {
 
         private Optional<String> description = Optional.empty();
 
+        private Optional<RoleTypeEnum> type = Optional.empty();
+
+        private Optional<String> ownerId = Optional.empty();
+
         @JsonAnySetter
         private Map<String, Object> additionalProperties = new HashMap<>();
 
@@ -109,6 +138,8 @@ public Builder from(UpdateRoleResponseContent other) {
             id(other.getId());
             name(other.getName());
             description(other.getDescription());
+            type(other.getType());
+            ownerId(other.getOwnerId());
             return this;
         }
 
@@ -154,8 +185,33 @@ public Builder description(String description) {
             return this;
         }
 
+        @JsonSetter(value = "type", nulls = Nulls.SKIP)
+        public Builder type(Optional<RoleTypeEnum> type) {
+            this.type = type;
+            return this;
+        }
+
+        public Builder type(RoleTypeEnum type) {
+            this.type = Optional.ofNullable(type);
+            return this;
+        }
+
+        /**
+         * <p>The id of the entity that owns this role, such as an organization id.</p>
+         */
+        @JsonSetter(value = "owner_id", nulls = Nulls.SKIP)
+        public Builder ownerId(Optional<String> ownerId) {
+            this.ownerId = ownerId;
+            return this;
+        }
+
+        public Builder ownerId(String ownerId) {
+            this.ownerId = Optional.ofNullable(ownerId);
+            return this;
+        }
+
         public UpdateRoleResponseContent build() {
-            return new UpdateRoleResponseContent(id, name, description, additionalProperties);
+            return new UpdateRoleResponseContent(id, name, description, type, ownerId, additionalProperties);
         }
 
         public Builder additionalProperty(String key, Object value) {
diff --git a/src/main/java/com/auth0/client/mgmt/types/UserEffectivePermissionRoleSourceResponseContent.java b/src/main/java/com/auth0/client/mgmt/types/UserEffectivePermissionRoleSourceResponseContent.java
index fd864d4d..125be358 100644
--- a/src/main/java/com/auth0/client/mgmt/types/UserEffectivePermissionRoleSourceResponseContent.java
+++ b/src/main/java/com/auth0/client/mgmt/types/UserEffectivePermissionRoleSourceResponseContent.java
@@ -27,6 +27,10 @@ public final class UserEffectivePermissionRoleSourceResponseContent {
 
     private final Optional<String> description;
 
+    private final Optional<RoleTypeEnum> type;
+
+    private final Optional<String> ownerId;
+
     private final Optional<List<UserEffectivePermissionRoleSourceEnum>> sources;
 
     private final Map<String, Object> additionalProperties;
@@ -35,11 +39,15 @@ private UserEffectivePermissionRoleSourceResponseContent(
             Optional<String> id,
             Optional<String> name,
             Optional<String> description,
+            Optional<RoleTypeEnum> type,
+            Optional<String> ownerId,
             Optional<List<UserEffectivePermissionRoleSourceEnum>> sources,
             Map<String, Object> additionalProperties) {
         this.id = id;
         this.name = name;
         this.description = description;
+        this.type = type;
+        this.ownerId = ownerId;
         this.sources = sources;
         this.additionalProperties = additionalProperties;
     }
@@ -68,6 +76,19 @@ public Optional<String> getDescription() {
         return description;
     }
 
+    @JsonProperty("type")
+    public Optional<RoleTypeEnum> getType() {
+        return type;
+    }
+
+    /**
+     * @return The id of the entity that owns this role, such as an organization id.
+     */
+    @JsonProperty("owner_id")
+    public Optional<String> getOwnerId() {
+        return ownerId;
+    }
+
     /**
      * @return List of sources where this role is coming from.
      */
@@ -92,12 +113,14 @@ private boolean equalTo(UserEffectivePermissionRoleSourceResponseContent other)
         return id.equals(other.id)
                 && name.equals(other.name)
                 && description.equals(other.description)
+                && type.equals(other.type)
+                && ownerId.equals(other.ownerId)
                 && sources.equals(other.sources);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.id, this.name, this.description, this.sources);
+        return Objects.hash(this.id, this.name, this.description, this.type, this.ownerId, this.sources);
     }
 
     @java.lang.Override
@@ -117,6 +140,10 @@ public static final class Builder {
 
         private Optional<String> description = Optional.empty();
 
+        private Optional<RoleTypeEnum> type = Optional.empty();
+
+        private Optional<String> ownerId = Optional.empty();
+
         private Optional<List<UserEffectivePermissionRoleSourceEnum>> sources = Optional.empty();
 
         @JsonAnySetter
@@ -128,6 +155,8 @@ public Builder from(UserEffectivePermissionRoleSourceResponseContent other) {
             id(other.getId());
             name(other.getName());
             description(other.getDescription());
+            type(other.getType());
+            ownerId(other.getOwnerId());
             sources(other.getSources());
             return this;
         }
@@ -174,6 +203,31 @@ public Builder description(String description) {
             return this;
         }
 
+        @JsonSetter(value = "type", nulls = Nulls.SKIP)
+        public Builder type(Optional<RoleTypeEnum> type) {
+            this.type = type;
+            return this;
+        }
+
+        public Builder type(RoleTypeEnum type) {
+            this.type = Optional.ofNullable(type);
+            return this;
+        }
+
+        /**
+         * <p>The id of the entity that owns this role, such as an organization id.</p>
+         */
+        @JsonSetter(value = "owner_id", nulls = Nulls.SKIP)
+        public Builder ownerId(Optional<String> ownerId) {
+            this.ownerId = ownerId;
+            return this;
+        }
+
+        public Builder ownerId(String ownerId) {
+            this.ownerId = Optional.ofNullable(ownerId);
+            return this;
+        }
+
         /**
          * <p>List of sources where this role is coming from.</p>
          */
@@ -190,7 +244,7 @@ public Builder sources(List<UserEffectivePermissionRoleSourceEnum> sources) {
 
         public UserEffectivePermissionRoleSourceResponseContent build() {
             return new UserEffectivePermissionRoleSourceResponseContent(
-                    id, name, description, sources, additionalProperties);
+                    id, name, description, type, ownerId, sources, additionalProperties);
         }
 
         public Builder additionalProperty(String key, Object value) {
diff --git a/src/main/java/com/auth0/client/mgmt/users/AsyncPermissionsClient.java b/src/main/java/com/auth0/client/mgmt/users/AsyncPermissionsClient.java
index 3a22eca4..0d366d95 100644
--- a/src/main/java/com/auth0/client/mgmt/users/AsyncPermissionsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/users/AsyncPermissionsClient.java
@@ -31,6 +31,7 @@ public AsyncRawPermissionsClient withRawResponse() {
 
     /**
      * Retrieve all permissions associated with the user.
+     * <p><strong>Note</strong>: Returns only permissions from direct assignments and directly assigned roles. For permissions a user has via group-based role assignments, use <code>GET /api/v2/users/{id}/effective-permissions</code>.</p>
      */
     public CompletableFuture<SyncPagingIterable<UserPermissionSchema>> list(String id) {
         return this.rawClient.list(id).thenApply(response -> response.body());
@@ -38,6 +39,7 @@ public CompletableFuture<SyncPagingIterable<UserPermissionSchema>> list(String i
 
     /**
      * Retrieve all permissions associated with the user.
+     * <p><strong>Note</strong>: Returns only permissions from direct assignments and directly assigned roles. For permissions a user has via group-based role assignments, use <code>GET /api/v2/users/{id}/effective-permissions</code>.</p>
      */
     public CompletableFuture<SyncPagingIterable<UserPermissionSchema>> list(String id, RequestOptions requestOptions) {
         return this.rawClient.list(id, requestOptions).thenApply(response -> response.body());
@@ -45,6 +47,7 @@ public CompletableFuture<SyncPagingIterable<UserPermissionSchema>> list(String i
 
     /**
      * Retrieve all permissions associated with the user.
+     * <p><strong>Note</strong>: Returns only permissions from direct assignments and directly assigned roles. For permissions a user has via group-based role assignments, use <code>GET /api/v2/users/{id}/effective-permissions</code>.</p>
      */
     public CompletableFuture<SyncPagingIterable<UserPermissionSchema>> list(
             String id, ListUserPermissionsRequestParameters request) {
@@ -53,6 +56,7 @@ public CompletableFuture<SyncPagingIterable<UserPermissionSchema>> list(
 
     /**
      * Retrieve all permissions associated with the user.
+     * <p><strong>Note</strong>: Returns only permissions from direct assignments and directly assigned roles. For permissions a user has via group-based role assignments, use <code>GET /api/v2/users/{id}/effective-permissions</code>.</p>
      */
     public CompletableFuture<SyncPagingIterable<UserPermissionSchema>> list(
             String id, ListUserPermissionsRequestParameters request, RequestOptions requestOptions) {
diff --git a/src/main/java/com/auth0/client/mgmt/users/AsyncRawGroupsClient.java b/src/main/java/com/auth0/client/mgmt/users/AsyncRawGroupsClient.java
index eeb67bd9..57302c1b 100644
--- a/src/main/java/com/auth0/client/mgmt/users/AsyncRawGroupsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/users/AsyncRawGroupsClient.java
@@ -84,6 +84,8 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<UserGroups
             QueryStringMapper.addQueryParameter(
                     httpUrl, "include_fields", request.getIncludeFields().orElse(null), false);
         }
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/users/AsyncRawPermissionsClient.java b/src/main/java/com/auth0/client/mgmt/users/AsyncRawPermissionsClient.java
index d91515cf..8d298da0 100644
--- a/src/main/java/com/auth0/client/mgmt/users/AsyncRawPermissionsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/users/AsyncRawPermissionsClient.java
@@ -49,6 +49,7 @@ public AsyncRawPermissionsClient(ClientOptions clientOptions) {
 
     /**
      * Retrieve all permissions associated with the user.
+     * <p><strong>Note</strong>: Returns only permissions from direct assignments and directly assigned roles. For permissions a user has via group-based role assignments, use <code>GET /api/v2/users/{id}/effective-permissions</code>.</p>
      */
     public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<UserPermissionSchema>>> list(String id) {
         return list(id, ListUserPermissionsRequestParameters.builder().build());
@@ -56,6 +57,7 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<UserPermis
 
     /**
      * Retrieve all permissions associated with the user.
+     * <p><strong>Note</strong>: Returns only permissions from direct assignments and directly assigned roles. For permissions a user has via group-based role assignments, use <code>GET /api/v2/users/{id}/effective-permissions</code>.</p>
      */
     public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<UserPermissionSchema>>> list(
             String id, RequestOptions requestOptions) {
@@ -64,6 +66,7 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<UserPermis
 
     /**
      * Retrieve all permissions associated with the user.
+     * <p><strong>Note</strong>: Returns only permissions from direct assignments and directly assigned roles. For permissions a user has via group-based role assignments, use <code>GET /api/v2/users/{id}/effective-permissions</code>.</p>
      */
     public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<UserPermissionSchema>>> list(
             String id, ListUserPermissionsRequestParameters request) {
@@ -72,6 +75,7 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<UserPermis
 
     /**
      * Retrieve all permissions associated with the user.
+     * <p><strong>Note</strong>: Returns only permissions from direct assignments and directly assigned roles. For permissions a user has via group-based role assignments, use <code>GET /api/v2/users/{id}/effective-permissions</code>.</p>
      */
     public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<UserPermissionSchema>>> list(
             String id, ListUserPermissionsRequestParameters request, RequestOptions requestOptions) {
diff --git a/src/main/java/com/auth0/client/mgmt/users/AsyncRawRefreshTokenClient.java b/src/main/java/com/auth0/client/mgmt/users/AsyncRawRefreshTokenClient.java
index 562e8012..fca3b66f 100644
--- a/src/main/java/com/auth0/client/mgmt/users/AsyncRawRefreshTokenClient.java
+++ b/src/main/java/com/auth0/client/mgmt/users/AsyncRawRefreshTokenClient.java
@@ -78,6 +78,8 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<RefreshTok
                 .addPathSegments("users")
                 .addPathSegment(userId)
                 .addPathSegments("refresh-tokens");
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/users/AsyncRawRolesClient.java b/src/main/java/com/auth0/client/mgmt/users/AsyncRawRolesClient.java
index 41f4e642..66dfbbfb 100644
--- a/src/main/java/com/auth0/client/mgmt/users/AsyncRawRolesClient.java
+++ b/src/main/java/com/auth0/client/mgmt/users/AsyncRawRolesClient.java
@@ -50,6 +50,7 @@ public AsyncRawRolesClient(ClientOptions clientOptions) {
     /**
      * Retrieve detailed list of all user roles currently assigned to a user.
      * <p><strong>Note</strong>: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles">Get user roles assigned to an Organization member</a>.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments. To also include group-based role assignments, use <code>GET /api/v2/users/{id}/effective-roles</code>.</p>
      */
     public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Role>>> list(String id) {
         return list(id, ListUserRolesRequestParameters.builder().build());
@@ -58,6 +59,7 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Role>>> li
     /**
      * Retrieve detailed list of all user roles currently assigned to a user.
      * <p><strong>Note</strong>: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles">Get user roles assigned to an Organization member</a>.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments. To also include group-based role assignments, use <code>GET /api/v2/users/{id}/effective-roles</code>.</p>
      */
     public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Role>>> list(
             String id, RequestOptions requestOptions) {
@@ -67,6 +69,7 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Role>>> li
     /**
      * Retrieve detailed list of all user roles currently assigned to a user.
      * <p><strong>Note</strong>: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles">Get user roles assigned to an Organization member</a>.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments. To also include group-based role assignments, use <code>GET /api/v2/users/{id}/effective-roles</code>.</p>
      */
     public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Role>>> list(
             String id, ListUserRolesRequestParameters request) {
@@ -76,6 +79,7 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Role>>> li
     /**
      * Retrieve detailed list of all user roles currently assigned to a user.
      * <p><strong>Note</strong>: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles">Get user roles assigned to an Organization member</a>.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments. To also include group-based role assignments, use <code>GET /api/v2/users/{id}/effective-roles</code>.</p>
      */
     public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<Role>>> list(
             String id, ListUserRolesRequestParameters request, RequestOptions requestOptions) {
diff --git a/src/main/java/com/auth0/client/mgmt/users/AsyncRawSessionsClient.java b/src/main/java/com/auth0/client/mgmt/users/AsyncRawSessionsClient.java
index 1803065b..e08f8cb3 100644
--- a/src/main/java/com/auth0/client/mgmt/users/AsyncRawSessionsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/users/AsyncRawSessionsClient.java
@@ -78,6 +78,8 @@ public CompletableFuture<ManagementApiHttpResponse<SyncPagingIterable<SessionRes
                 .addPathSegments("users")
                 .addPathSegment(userId)
                 .addPathSegments("sessions");
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/users/AsyncRolesClient.java b/src/main/java/com/auth0/client/mgmt/users/AsyncRolesClient.java
index 488688e2..51ce4d93 100644
--- a/src/main/java/com/auth0/client/mgmt/users/AsyncRolesClient.java
+++ b/src/main/java/com/auth0/client/mgmt/users/AsyncRolesClient.java
@@ -32,6 +32,7 @@ public AsyncRawRolesClient withRawResponse() {
     /**
      * Retrieve detailed list of all user roles currently assigned to a user.
      * <p><strong>Note</strong>: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles">Get user roles assigned to an Organization member</a>.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments. To also include group-based role assignments, use <code>GET /api/v2/users/{id}/effective-roles</code>.</p>
      */
     public CompletableFuture<SyncPagingIterable<Role>> list(String id) {
         return this.rawClient.list(id).thenApply(response -> response.body());
@@ -40,6 +41,7 @@ public CompletableFuture<SyncPagingIterable<Role>> list(String id) {
     /**
      * Retrieve detailed list of all user roles currently assigned to a user.
      * <p><strong>Note</strong>: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles">Get user roles assigned to an Organization member</a>.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments. To also include group-based role assignments, use <code>GET /api/v2/users/{id}/effective-roles</code>.</p>
      */
     public CompletableFuture<SyncPagingIterable<Role>> list(String id, RequestOptions requestOptions) {
         return this.rawClient.list(id, requestOptions).thenApply(response -> response.body());
@@ -48,6 +50,7 @@ public CompletableFuture<SyncPagingIterable<Role>> list(String id, RequestOption
     /**
      * Retrieve detailed list of all user roles currently assigned to a user.
      * <p><strong>Note</strong>: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles">Get user roles assigned to an Organization member</a>.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments. To also include group-based role assignments, use <code>GET /api/v2/users/{id}/effective-roles</code>.</p>
      */
     public CompletableFuture<SyncPagingIterable<Role>> list(String id, ListUserRolesRequestParameters request) {
         return this.rawClient.list(id, request).thenApply(response -> response.body());
@@ -56,6 +59,7 @@ public CompletableFuture<SyncPagingIterable<Role>> list(String id, ListUserRoles
     /**
      * Retrieve detailed list of all user roles currently assigned to a user.
      * <p><strong>Note</strong>: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles">Get user roles assigned to an Organization member</a>.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments. To also include group-based role assignments, use <code>GET /api/v2/users/{id}/effective-roles</code>.</p>
      */
     public CompletableFuture<SyncPagingIterable<Role>> list(
             String id, ListUserRolesRequestParameters request, RequestOptions requestOptions) {
diff --git a/src/main/java/com/auth0/client/mgmt/users/PermissionsClient.java b/src/main/java/com/auth0/client/mgmt/users/PermissionsClient.java
index 97f9cd7f..ed7ac229 100644
--- a/src/main/java/com/auth0/client/mgmt/users/PermissionsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/users/PermissionsClient.java
@@ -30,6 +30,7 @@ public RawPermissionsClient withRawResponse() {
 
     /**
      * Retrieve all permissions associated with the user.
+     * <p><strong>Note</strong>: Returns only permissions from direct assignments and directly assigned roles. For permissions a user has via group-based role assignments, use <code>GET /api/v2/users/{id}/effective-permissions</code>.</p>
      */
     public SyncPagingIterable<UserPermissionSchema> list(String id) {
         return this.rawClient.list(id).body();
@@ -37,6 +38,7 @@ public SyncPagingIterable<UserPermissionSchema> list(String id) {
 
     /**
      * Retrieve all permissions associated with the user.
+     * <p><strong>Note</strong>: Returns only permissions from direct assignments and directly assigned roles. For permissions a user has via group-based role assignments, use <code>GET /api/v2/users/{id}/effective-permissions</code>.</p>
      */
     public SyncPagingIterable<UserPermissionSchema> list(String id, RequestOptions requestOptions) {
         return this.rawClient.list(id, requestOptions).body();
@@ -44,6 +46,7 @@ public SyncPagingIterable<UserPermissionSchema> list(String id, RequestOptions r
 
     /**
      * Retrieve all permissions associated with the user.
+     * <p><strong>Note</strong>: Returns only permissions from direct assignments and directly assigned roles. For permissions a user has via group-based role assignments, use <code>GET /api/v2/users/{id}/effective-permissions</code>.</p>
      */
     public SyncPagingIterable<UserPermissionSchema> list(String id, ListUserPermissionsRequestParameters request) {
         return this.rawClient.list(id, request).body();
@@ -51,6 +54,7 @@ public SyncPagingIterable<UserPermissionSchema> list(String id, ListUserPermissi
 
     /**
      * Retrieve all permissions associated with the user.
+     * <p><strong>Note</strong>: Returns only permissions from direct assignments and directly assigned roles. For permissions a user has via group-based role assignments, use <code>GET /api/v2/users/{id}/effective-permissions</code>.</p>
      */
     public SyncPagingIterable<UserPermissionSchema> list(
             String id, ListUserPermissionsRequestParameters request, RequestOptions requestOptions) {
diff --git a/src/main/java/com/auth0/client/mgmt/users/RawGroupsClient.java b/src/main/java/com/auth0/client/mgmt/users/RawGroupsClient.java
index e87f4c81..a083c820 100644
--- a/src/main/java/com/auth0/client/mgmt/users/RawGroupsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/users/RawGroupsClient.java
@@ -79,6 +79,8 @@ public ManagementApiHttpResponse<SyncPagingIterable<UserGroupsResponseSchema>> g
             QueryStringMapper.addQueryParameter(
                     httpUrl, "include_fields", request.getIncludeFields().orElse(null), false);
         }
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/users/RawPermissionsClient.java b/src/main/java/com/auth0/client/mgmt/users/RawPermissionsClient.java
index bdf323e6..96c3bcb9 100644
--- a/src/main/java/com/auth0/client/mgmt/users/RawPermissionsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/users/RawPermissionsClient.java
@@ -44,6 +44,7 @@ public RawPermissionsClient(ClientOptions clientOptions) {
 
     /**
      * Retrieve all permissions associated with the user.
+     * <p><strong>Note</strong>: Returns only permissions from direct assignments and directly assigned roles. For permissions a user has via group-based role assignments, use <code>GET /api/v2/users/{id}/effective-permissions</code>.</p>
      */
     public ManagementApiHttpResponse<SyncPagingIterable<UserPermissionSchema>> list(String id) {
         return list(id, ListUserPermissionsRequestParameters.builder().build());
@@ -51,6 +52,7 @@ public ManagementApiHttpResponse<SyncPagingIterable<UserPermissionSchema>> list(
 
     /**
      * Retrieve all permissions associated with the user.
+     * <p><strong>Note</strong>: Returns only permissions from direct assignments and directly assigned roles. For permissions a user has via group-based role assignments, use <code>GET /api/v2/users/{id}/effective-permissions</code>.</p>
      */
     public ManagementApiHttpResponse<SyncPagingIterable<UserPermissionSchema>> list(
             String id, RequestOptions requestOptions) {
@@ -59,6 +61,7 @@ public ManagementApiHttpResponse<SyncPagingIterable<UserPermissionSchema>> list(
 
     /**
      * Retrieve all permissions associated with the user.
+     * <p><strong>Note</strong>: Returns only permissions from direct assignments and directly assigned roles. For permissions a user has via group-based role assignments, use <code>GET /api/v2/users/{id}/effective-permissions</code>.</p>
      */
     public ManagementApiHttpResponse<SyncPagingIterable<UserPermissionSchema>> list(
             String id, ListUserPermissionsRequestParameters request) {
@@ -67,6 +70,7 @@ public ManagementApiHttpResponse<SyncPagingIterable<UserPermissionSchema>> list(
 
     /**
      * Retrieve all permissions associated with the user.
+     * <p><strong>Note</strong>: Returns only permissions from direct assignments and directly assigned roles. For permissions a user has via group-based role assignments, use <code>GET /api/v2/users/{id}/effective-permissions</code>.</p>
      */
     public ManagementApiHttpResponse<SyncPagingIterable<UserPermissionSchema>> list(
             String id, ListUserPermissionsRequestParameters request, RequestOptions requestOptions) {
diff --git a/src/main/java/com/auth0/client/mgmt/users/RawRefreshTokenClient.java b/src/main/java/com/auth0/client/mgmt/users/RawRefreshTokenClient.java
index c09a6ed0..7cc24bfb 100644
--- a/src/main/java/com/auth0/client/mgmt/users/RawRefreshTokenClient.java
+++ b/src/main/java/com/auth0/client/mgmt/users/RawRefreshTokenClient.java
@@ -72,6 +72,8 @@ public ManagementApiHttpResponse<SyncPagingIterable<RefreshTokenResponseContent>
                 .addPathSegments("users")
                 .addPathSegment(userId)
                 .addPathSegments("refresh-tokens");
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/users/RawRolesClient.java b/src/main/java/com/auth0/client/mgmt/users/RawRolesClient.java
index 3b109e6f..2f0399d4 100644
--- a/src/main/java/com/auth0/client/mgmt/users/RawRolesClient.java
+++ b/src/main/java/com/auth0/client/mgmt/users/RawRolesClient.java
@@ -45,6 +45,7 @@ public RawRolesClient(ClientOptions clientOptions) {
     /**
      * Retrieve detailed list of all user roles currently assigned to a user.
      * <p><strong>Note</strong>: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles">Get user roles assigned to an Organization member</a>.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments. To also include group-based role assignments, use <code>GET /api/v2/users/{id}/effective-roles</code>.</p>
      */
     public ManagementApiHttpResponse<SyncPagingIterable<Role>> list(String id) {
         return list(id, ListUserRolesRequestParameters.builder().build());
@@ -53,6 +54,7 @@ public ManagementApiHttpResponse<SyncPagingIterable<Role>> list(String id) {
     /**
      * Retrieve detailed list of all user roles currently assigned to a user.
      * <p><strong>Note</strong>: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles">Get user roles assigned to an Organization member</a>.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments. To also include group-based role assignments, use <code>GET /api/v2/users/{id}/effective-roles</code>.</p>
      */
     public ManagementApiHttpResponse<SyncPagingIterable<Role>> list(String id, RequestOptions requestOptions) {
         return list(id, ListUserRolesRequestParameters.builder().build(), requestOptions);
@@ -61,6 +63,7 @@ public ManagementApiHttpResponse<SyncPagingIterable<Role>> list(String id, Reque
     /**
      * Retrieve detailed list of all user roles currently assigned to a user.
      * <p><strong>Note</strong>: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles">Get user roles assigned to an Organization member</a>.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments. To also include group-based role assignments, use <code>GET /api/v2/users/{id}/effective-roles</code>.</p>
      */
     public ManagementApiHttpResponse<SyncPagingIterable<Role>> list(String id, ListUserRolesRequestParameters request) {
         return list(id, request, null);
@@ -69,6 +72,7 @@ public ManagementApiHttpResponse<SyncPagingIterable<Role>> list(String id, ListU
     /**
      * Retrieve detailed list of all user roles currently assigned to a user.
      * <p><strong>Note</strong>: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles">Get user roles assigned to an Organization member</a>.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments. To also include group-based role assignments, use <code>GET /api/v2/users/{id}/effective-roles</code>.</p>
      */
     public ManagementApiHttpResponse<SyncPagingIterable<Role>> list(
             String id, ListUserRolesRequestParameters request, RequestOptions requestOptions) {
diff --git a/src/main/java/com/auth0/client/mgmt/users/RawSessionsClient.java b/src/main/java/com/auth0/client/mgmt/users/RawSessionsClient.java
index 1d0bcf57..221e14e3 100644
--- a/src/main/java/com/auth0/client/mgmt/users/RawSessionsClient.java
+++ b/src/main/java/com/auth0/client/mgmt/users/RawSessionsClient.java
@@ -72,6 +72,8 @@ public ManagementApiHttpResponse<SyncPagingIterable<SessionResponseContent>> lis
                 .addPathSegments("users")
                 .addPathSegment(userId)
                 .addPathSegments("sessions");
+        QueryStringMapper.addQueryParameter(
+                httpUrl, "include_totals", request.getIncludeTotals().orElse(true), false);
         if (!request.getFrom().isAbsent()) {
             QueryStringMapper.addQueryParameter(
                     httpUrl, "from", request.getFrom().orElse(null), false);
diff --git a/src/main/java/com/auth0/client/mgmt/users/RolesClient.java b/src/main/java/com/auth0/client/mgmt/users/RolesClient.java
index c20bdf61..a3ac6b7f 100644
--- a/src/main/java/com/auth0/client/mgmt/users/RolesClient.java
+++ b/src/main/java/com/auth0/client/mgmt/users/RolesClient.java
@@ -31,6 +31,7 @@ public RawRolesClient withRawResponse() {
     /**
      * Retrieve detailed list of all user roles currently assigned to a user.
      * <p><strong>Note</strong>: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles">Get user roles assigned to an Organization member</a>.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments. To also include group-based role assignments, use <code>GET /api/v2/users/{id}/effective-roles</code>.</p>
      */
     public SyncPagingIterable<Role> list(String id) {
         return this.rawClient.list(id).body();
@@ -39,6 +40,7 @@ public SyncPagingIterable<Role> list(String id) {
     /**
      * Retrieve detailed list of all user roles currently assigned to a user.
      * <p><strong>Note</strong>: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles">Get user roles assigned to an Organization member</a>.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments. To also include group-based role assignments, use <code>GET /api/v2/users/{id}/effective-roles</code>.</p>
      */
     public SyncPagingIterable<Role> list(String id, RequestOptions requestOptions) {
         return this.rawClient.list(id, requestOptions).body();
@@ -47,6 +49,7 @@ public SyncPagingIterable<Role> list(String id, RequestOptions requestOptions) {
     /**
      * Retrieve detailed list of all user roles currently assigned to a user.
      * <p><strong>Note</strong>: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles">Get user roles assigned to an Organization member</a>.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments. To also include group-based role assignments, use <code>GET /api/v2/users/{id}/effective-roles</code>.</p>
      */
     public SyncPagingIterable<Role> list(String id, ListUserRolesRequestParameters request) {
         return this.rawClient.list(id, request).body();
@@ -55,6 +58,7 @@ public SyncPagingIterable<Role> list(String id, ListUserRolesRequestParameters r
     /**
      * Retrieve detailed list of all user roles currently assigned to a user.
      * <p><strong>Note</strong>: This action retrieves all roles assigned to a user in the context of your whole tenant. To retrieve Organization-specific roles, use the following endpoint: <a href="https://auth0.com/docs/api/management/v2/organizations/get-organization-member-roles">Get user roles assigned to an Organization member</a>.</p>
+     * <p><strong>Note</strong>: Returns only direct role assignments. To also include group-based role assignments, use <code>GET /api/v2/users/{id}/effective-roles</code>.</p>
      */
     public SyncPagingIterable<Role> list(
             String id, ListUserRolesRequestParameters request, RequestOptions requestOptions) {
diff --git a/src/main/java/com/auth0/client/mgmt/users/types/GetUserGroupsRequestParameters.java b/src/main/java/com/auth0/client/mgmt/users/types/GetUserGroupsRequestParameters.java
index 5fd93815..5c30eadb 100644
--- a/src/main/java/com/auth0/client/mgmt/users/types/GetUserGroupsRequestParameters.java
+++ b/src/main/java/com/auth0/client/mgmt/users/types/GetUserGroupsRequestParameters.java
@@ -27,6 +27,8 @@ public final class GetUserGroupsRequestParameters {
 
     private final OptionalNullable<Boolean> includeFields;
 
+    private final OptionalNullable<Boolean> includeTotals;
+
     private final OptionalNullable<String> from;
 
     private final OptionalNullable<Integer> take;
@@ -36,11 +38,13 @@ public final class GetUserGroupsRequestParameters {
     private GetUserGroupsRequestParameters(
             OptionalNullable<String> fields,
             OptionalNullable<Boolean> includeFields,
+            OptionalNullable<Boolean> includeTotals,
             OptionalNullable<String> from,
             OptionalNullable<Integer> take,
             Map<String, Object> additionalProperties) {
         this.fields = fields;
         this.includeFields = includeFields;
+        this.includeTotals = includeTotals;
         this.from = from;
         this.take = take;
         this.additionalProperties = additionalProperties;
@@ -70,6 +74,18 @@ public OptionalNullable<Boolean> getIncludeFields() {
         return includeFields;
     }
 
+    /**
+     * @return Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    public OptionalNullable<Boolean> getIncludeTotals() {
+        if (includeTotals == null) {
+            return OptionalNullable.absent();
+        }
+        return includeTotals;
+    }
+
     /**
      * @return Optional Id from which to start selection.
      */
@@ -106,6 +122,12 @@ private OptionalNullable<Boolean> _getIncludeFields() {
         return includeFields;
     }
 
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    private OptionalNullable<Boolean> _getIncludeTotals() {
+        return includeTotals;
+    }
+
     @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
     @JsonProperty("from")
     private OptionalNullable<String> _getFrom() {
@@ -132,13 +154,14 @@ public Map<String, Object> getAdditionalProperties() {
     private boolean equalTo(GetUserGroupsRequestParameters other) {
         return fields.equals(other.fields)
                 && includeFields.equals(other.includeFields)
+                && includeTotals.equals(other.includeTotals)
                 && from.equals(other.from)
                 && take.equals(other.take);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.fields, this.includeFields, this.from, this.take);
+        return Objects.hash(this.fields, this.includeFields, this.includeTotals, this.from, this.take);
     }
 
     @java.lang.Override
@@ -156,6 +179,8 @@ public static final class Builder {
 
         private OptionalNullable<Boolean> includeFields = OptionalNullable.absent();
 
+        private OptionalNullable<Boolean> includeTotals = OptionalNullable.absent();
+
         private OptionalNullable<String> from = OptionalNullable.absent();
 
         private OptionalNullable<Integer> take = OptionalNullable.absent();
@@ -168,6 +193,7 @@ private Builder() {}
         public Builder from(GetUserGroupsRequestParameters other) {
             fields(other.getFields());
             includeFields(other.getIncludeFields());
+            includeTotals(other.getIncludeTotals());
             from(other.getFrom());
             take(other.getTake());
             return this;
@@ -241,6 +267,40 @@ public Builder includeFields(com.auth0.client.mgmt.core.Nullable<Boolean> includ
             return this;
         }
 
+        /**
+         * <p>Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).</p>
+         */
+        @JsonSetter(value = "include_totals", nulls = Nulls.SKIP)
+        public Builder includeTotals(@Nullable OptionalNullable<Boolean> includeTotals) {
+            this.includeTotals = includeTotals;
+            return this;
+        }
+
+        public Builder includeTotals(Boolean includeTotals) {
+            this.includeTotals = OptionalNullable.of(includeTotals);
+            return this;
+        }
+
+        public Builder includeTotals(Optional<Boolean> includeTotals) {
+            if (includeTotals.isPresent()) {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            } else {
+                this.includeTotals = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder includeTotals(com.auth0.client.mgmt.core.Nullable<Boolean> includeTotals) {
+            if (includeTotals.isNull()) {
+                this.includeTotals = OptionalNullable.ofNull();
+            } else if (includeTotals.isEmpty()) {
+                this.includeTotals = OptionalNullable.absent();
+            } else {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            }
+            return this;
+        }
+
         /**
          * <p>Optional Id from which to start selection.</p>
          */
@@ -310,7 +370,8 @@ public Builder take(com.auth0.client.mgmt.core.Nullable<Integer> take) {
         }
 
         public GetUserGroupsRequestParameters build() {
-            return new GetUserGroupsRequestParameters(fields, includeFields, from, take, additionalProperties);
+            return new GetUserGroupsRequestParameters(
+                    fields, includeFields, includeTotals, from, take, additionalProperties);
         }
 
         public Builder additionalProperty(String key, Object value) {
diff --git a/src/main/java/com/auth0/client/mgmt/users/types/ListRefreshTokensRequestParameters.java b/src/main/java/com/auth0/client/mgmt/users/types/ListRefreshTokensRequestParameters.java
index 0164af02..0810d17c 100644
--- a/src/main/java/com/auth0/client/mgmt/users/types/ListRefreshTokensRequestParameters.java
+++ b/src/main/java/com/auth0/client/mgmt/users/types/ListRefreshTokensRequestParameters.java
@@ -23,6 +23,8 @@
 @JsonInclude(JsonInclude.Include.NON_ABSENT)
 @JsonDeserialize(builder = ListRefreshTokensRequestParameters.Builder.class)
 public final class ListRefreshTokensRequestParameters {
+    private final OptionalNullable<Boolean> includeTotals;
+
     private final OptionalNullable<String> from;
 
     private final OptionalNullable<Integer> take;
@@ -30,12 +32,28 @@ public final class ListRefreshTokensRequestParameters {
     private final Map<String, Object> additionalProperties;
 
     private ListRefreshTokensRequestParameters(
-            OptionalNullable<String> from, OptionalNullable<Integer> take, Map<String, Object> additionalProperties) {
+            OptionalNullable<Boolean> includeTotals,
+            OptionalNullable<String> from,
+            OptionalNullable<Integer> take,
+            Map<String, Object> additionalProperties) {
+        this.includeTotals = includeTotals;
         this.from = from;
         this.take = take;
         this.additionalProperties = additionalProperties;
     }
 
+    /**
+     * @return Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    public OptionalNullable<Boolean> getIncludeTotals() {
+        if (includeTotals == null) {
+            return OptionalNullable.absent();
+        }
+        return includeTotals;
+    }
+
     /**
      * @return An optional cursor from which to start the selection (exclusive).
      */
@@ -60,6 +78,12 @@ public OptionalNullable<Integer> getTake() {
         return take;
     }
 
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    private OptionalNullable<Boolean> _getIncludeTotals() {
+        return includeTotals;
+    }
+
     @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
     @JsonProperty("from")
     private OptionalNullable<String> _getFrom() {
@@ -85,12 +109,12 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(ListRefreshTokensRequestParameters other) {
-        return from.equals(other.from) && take.equals(other.take);
+        return includeTotals.equals(other.includeTotals) && from.equals(other.from) && take.equals(other.take);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.from, this.take);
+        return Objects.hash(this.includeTotals, this.from, this.take);
     }
 
     @java.lang.Override
@@ -104,6 +128,8 @@ public static Builder builder() {
 
     @JsonIgnoreProperties(ignoreUnknown = true)
     public static final class Builder {
+        private OptionalNullable<Boolean> includeTotals = OptionalNullable.absent();
+
         private OptionalNullable<String> from = OptionalNullable.absent();
 
         private OptionalNullable<Integer> take = OptionalNullable.absent();
@@ -114,11 +140,46 @@ public static final class Builder {
         private Builder() {}
 
         public Builder from(ListRefreshTokensRequestParameters other) {
+            includeTotals(other.getIncludeTotals());
             from(other.getFrom());
             take(other.getTake());
             return this;
         }
 
+        /**
+         * <p>Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).</p>
+         */
+        @JsonSetter(value = "include_totals", nulls = Nulls.SKIP)
+        public Builder includeTotals(@Nullable OptionalNullable<Boolean> includeTotals) {
+            this.includeTotals = includeTotals;
+            return this;
+        }
+
+        public Builder includeTotals(Boolean includeTotals) {
+            this.includeTotals = OptionalNullable.of(includeTotals);
+            return this;
+        }
+
+        public Builder includeTotals(Optional<Boolean> includeTotals) {
+            if (includeTotals.isPresent()) {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            } else {
+                this.includeTotals = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder includeTotals(com.auth0.client.mgmt.core.Nullable<Boolean> includeTotals) {
+            if (includeTotals.isNull()) {
+                this.includeTotals = OptionalNullable.ofNull();
+            } else if (includeTotals.isEmpty()) {
+                this.includeTotals = OptionalNullable.absent();
+            } else {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            }
+            return this;
+        }
+
         /**
          * <p>An optional cursor from which to start the selection (exclusive).</p>
          */
@@ -188,7 +249,7 @@ public Builder take(com.auth0.client.mgmt.core.Nullable<Integer> take) {
         }
 
         public ListRefreshTokensRequestParameters build() {
-            return new ListRefreshTokensRequestParameters(from, take, additionalProperties);
+            return new ListRefreshTokensRequestParameters(includeTotals, from, take, additionalProperties);
         }
 
         public Builder additionalProperty(String key, Object value) {
diff --git a/src/main/java/com/auth0/client/mgmt/users/types/ListUserSessionsRequestParameters.java b/src/main/java/com/auth0/client/mgmt/users/types/ListUserSessionsRequestParameters.java
index 79dcdfd8..7772a217 100644
--- a/src/main/java/com/auth0/client/mgmt/users/types/ListUserSessionsRequestParameters.java
+++ b/src/main/java/com/auth0/client/mgmt/users/types/ListUserSessionsRequestParameters.java
@@ -23,6 +23,8 @@
 @JsonInclude(JsonInclude.Include.NON_ABSENT)
 @JsonDeserialize(builder = ListUserSessionsRequestParameters.Builder.class)
 public final class ListUserSessionsRequestParameters {
+    private final OptionalNullable<Boolean> includeTotals;
+
     private final OptionalNullable<String> from;
 
     private final OptionalNullable<Integer> take;
@@ -30,12 +32,28 @@ public final class ListUserSessionsRequestParameters {
     private final Map<String, Object> additionalProperties;
 
     private ListUserSessionsRequestParameters(
-            OptionalNullable<String> from, OptionalNullable<Integer> take, Map<String, Object> additionalProperties) {
+            OptionalNullable<Boolean> includeTotals,
+            OptionalNullable<String> from,
+            OptionalNullable<Integer> take,
+            Map<String, Object> additionalProperties) {
+        this.includeTotals = includeTotals;
         this.from = from;
         this.take = take;
         this.additionalProperties = additionalProperties;
     }
 
+    /**
+     * @return Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).
+     */
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    public OptionalNullable<Boolean> getIncludeTotals() {
+        if (includeTotals == null) {
+            return OptionalNullable.absent();
+        }
+        return includeTotals;
+    }
+
     /**
      * @return An optional cursor from which to start the selection (exclusive).
      */
@@ -60,6 +78,12 @@ public OptionalNullable<Integer> getTake() {
         return take;
     }
 
+    @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
+    @JsonProperty("include_totals")
+    private OptionalNullable<Boolean> _getIncludeTotals() {
+        return includeTotals;
+    }
+
     @JsonInclude(value = JsonInclude.Include.CUSTOM, valueFilter = NullableNonemptyFilter.class)
     @JsonProperty("from")
     private OptionalNullable<String> _getFrom() {
@@ -84,12 +108,12 @@ public Map<String, Object> getAdditionalProperties() {
     }
 
     private boolean equalTo(ListUserSessionsRequestParameters other) {
-        return from.equals(other.from) && take.equals(other.take);
+        return includeTotals.equals(other.includeTotals) && from.equals(other.from) && take.equals(other.take);
     }
 
     @java.lang.Override
     public int hashCode() {
-        return Objects.hash(this.from, this.take);
+        return Objects.hash(this.includeTotals, this.from, this.take);
     }
 
     @java.lang.Override
@@ -103,6 +127,8 @@ public static Builder builder() {
 
     @JsonIgnoreProperties(ignoreUnknown = true)
     public static final class Builder {
+        private OptionalNullable<Boolean> includeTotals = OptionalNullable.absent();
+
         private OptionalNullable<String> from = OptionalNullable.absent();
 
         private OptionalNullable<Integer> take = OptionalNullable.absent();
@@ -113,11 +139,46 @@ public static final class Builder {
         private Builder() {}
 
         public Builder from(ListUserSessionsRequestParameters other) {
+            includeTotals(other.getIncludeTotals());
             from(other.getFrom());
             take(other.getTake());
             return this;
         }
 
+        /**
+         * <p>Return results inside an object that contains the total result count (true) or as a direct array of results (false, default).</p>
+         */
+        @JsonSetter(value = "include_totals", nulls = Nulls.SKIP)
+        public Builder includeTotals(@Nullable OptionalNullable<Boolean> includeTotals) {
+            this.includeTotals = includeTotals;
+            return this;
+        }
+
+        public Builder includeTotals(Boolean includeTotals) {
+            this.includeTotals = OptionalNullable.of(includeTotals);
+            return this;
+        }
+
+        public Builder includeTotals(Optional<Boolean> includeTotals) {
+            if (includeTotals.isPresent()) {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            } else {
+                this.includeTotals = OptionalNullable.absent();
+            }
+            return this;
+        }
+
+        public Builder includeTotals(com.auth0.client.mgmt.core.Nullable<Boolean> includeTotals) {
+            if (includeTotals.isNull()) {
+                this.includeTotals = OptionalNullable.ofNull();
+            } else if (includeTotals.isEmpty()) {
+                this.includeTotals = OptionalNullable.absent();
+            } else {
+                this.includeTotals = OptionalNullable.of(includeTotals.get());
+            }
+            return this;
+        }
+
         /**
          * <p>An optional cursor from which to start the selection (exclusive).</p>
          */
@@ -187,7 +248,7 @@ public Builder take(com.auth0.client.mgmt.core.Nullable<Integer> take) {
         }
 
         public ListUserSessionsRequestParameters build() {
-            return new ListUserSessionsRequestParameters(from, take, additionalProperties);
+            return new ListUserSessionsRequestParameters(includeTotals, from, take, additionalProperties);
         }
 
         public Builder additionalProperty(String key, Object value) {
diff --git a/src/test/java/com/auth0/client/mgmt/AgentsWireTest.java b/src/test/java/com/auth0/client/mgmt/AgentsWireTest.java
new file mode 100644
index 00000000..e8e2dcb7
--- /dev/null
+++ b/src/test/java/com/auth0/client/mgmt/AgentsWireTest.java
@@ -0,0 +1,329 @@
+package com.auth0.client.mgmt;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
+import com.auth0.client.mgmt.types.AgentResponseContent;
+import com.auth0.client.mgmt.types.CreateAgentRequestContent;
+import com.auth0.client.mgmt.types.ListAgentsRequestParameters;
+import com.auth0.client.mgmt.types.PatchAgentRequestParameters;
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import okhttp3.mockwebserver.MockResponse;
+import okhttp3.mockwebserver.MockWebServer;
+import okhttp3.mockwebserver.RecordedRequest;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.Assertions;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+
+public class AgentsWireTest {
+    private MockWebServer server;
+    private ManagementApi client;
+    private ObjectMapper objectMapper = ObjectMappers.JSON_MAPPER;
+
+    @BeforeEach
+    public void setup() throws Exception {
+        server = new MockWebServer();
+        server.start();
+        client = ManagementApi.builder()
+                .url(server.url("/").toString())
+                .token("test-token")
+                .build();
+    }
+
+    @AfterEach
+    public void teardown() throws Exception {
+        server.shutdown();
+    }
+
+    @Test
+    public void testList() throws Exception {
+        server.enqueue(
+                new MockResponse()
+                        .setResponseCode(200)
+                        .setBody(
+                                "{\"agents\":[{\"agent_id\":\"agent_id\",\"name\":\"name\",\"created_at\":\"2024-01-15T09:30:00Z\",\"updated_at\":\"2024-01-15T09:30:00Z\",\"external_agent_id\":\"external_agent_id\",\"metadata\":{\"key\":\"value\"}}],\"next\":\"next\"}"));
+        SyncPagingIterable<AgentResponseContent> response = client.agents()
+                .list(ListAgentsRequestParameters.builder().from("from").take(1).build());
+        RecordedRequest request = server.takeRequest();
+        Assertions.assertNotNull(request);
+        Assertions.assertEquals("GET", request.getMethod());
+
+        // Validate response body
+        Assertions.assertNotNull(response, "Response should not be null");
+        // Pagination response validated via MockWebServer
+        // The SDK correctly parses the response into a SyncPagingIterable
+    }
+
+    @Test
+    public void testCreate() throws Exception {
+        server.enqueue(
+                new MockResponse()
+                        .setResponseCode(200)
+                        .setBody(
+                                "{\"agent_id\":\"agent_id\",\"name\":\"name\",\"created_at\":\"2024-01-15T09:30:00Z\",\"updated_at\":\"2024-01-15T09:30:00Z\",\"external_agent_id\":\"external_agent_id\",\"metadata\":{\"key\":\"value\"}}"));
+        AgentResponseContent response = client.agents()
+                .create(CreateAgentRequestContent.builder().name("name").build());
+        RecordedRequest request = server.takeRequest();
+        Assertions.assertNotNull(request);
+        Assertions.assertEquals("POST", request.getMethod());
+        // Validate request body
+        String actualRequestBody = request.getBody().readUtf8();
+        String expectedRequestBody = "" + "{\n" + "  \"name\": \"name\"\n" + "}";
+        JsonNode actualJson = objectMapper.readTree(actualRequestBody);
+        JsonNode expectedJson = objectMapper.readTree(expectedRequestBody);
+        Assertions.assertTrue(jsonEquals(expectedJson, actualJson), "Request body structure does not match expected");
+        if (actualJson.has("type") || actualJson.has("_type") || actualJson.has("kind")) {
+            String discriminator = null;
+            if (actualJson.has("type")) discriminator = actualJson.get("type").asText();
+            else if (actualJson.has("_type"))
+                discriminator = actualJson.get("_type").asText();
+            else if (actualJson.has("kind"))
+                discriminator = actualJson.get("kind").asText();
+            Assertions.assertNotNull(discriminator, "Union type should have a discriminator field");
+            Assertions.assertFalse(discriminator.isEmpty(), "Union discriminator should not be empty");
+        }
+
+        if (!actualJson.isNull()) {
+            Assertions.assertTrue(
+                    actualJson.isObject() || actualJson.isArray() || actualJson.isValueNode(),
+                    "request should be a valid JSON value");
+        }
+
+        if (actualJson.isArray()) {
+            Assertions.assertTrue(actualJson.size() >= 0, "Array should have valid size");
+        }
+        if (actualJson.isObject()) {
+            Assertions.assertTrue(actualJson.size() >= 0, "Object should have valid field count");
+        }
+
+        // Validate response body
+        Assertions.assertNotNull(response, "Response should not be null");
+        String actualResponseJson = objectMapper.writeValueAsString(response);
+        String expectedResponseBody = ""
+                + "{\n"
+                + "  \"agent_id\": \"agent_id\",\n"
+                + "  \"name\": \"name\",\n"
+                + "  \"created_at\": \"2024-01-15T09:30:00Z\",\n"
+                + "  \"updated_at\": \"2024-01-15T09:30:00Z\",\n"
+                + "  \"external_agent_id\": \"external_agent_id\",\n"
+                + "  \"metadata\": {\n"
+                + "    \"key\": \"value\"\n"
+                + "  }\n"
+                + "}";
+        JsonNode actualResponseNode = objectMapper.readTree(actualResponseJson);
+        JsonNode expectedResponseNode = objectMapper.readTree(expectedResponseBody);
+        Assertions.assertTrue(
+                jsonEquals(expectedResponseNode, actualResponseNode),
+                "Response body structure does not match expected");
+        if (actualResponseNode.has("type") || actualResponseNode.has("_type") || actualResponseNode.has("kind")) {
+            String discriminator = null;
+            if (actualResponseNode.has("type"))
+                discriminator = actualResponseNode.get("type").asText();
+            else if (actualResponseNode.has("_type"))
+                discriminator = actualResponseNode.get("_type").asText();
+            else if (actualResponseNode.has("kind"))
+                discriminator = actualResponseNode.get("kind").asText();
+            Assertions.assertNotNull(discriminator, "Union type should have a discriminator field");
+            Assertions.assertFalse(discriminator.isEmpty(), "Union discriminator should not be empty");
+        }
+
+        if (!actualResponseNode.isNull()) {
+            Assertions.assertTrue(
+                    actualResponseNode.isObject() || actualResponseNode.isArray() || actualResponseNode.isValueNode(),
+                    "response should be a valid JSON value");
+        }
+
+        if (actualResponseNode.isArray()) {
+            Assertions.assertTrue(actualResponseNode.size() >= 0, "Array should have valid size");
+        }
+        if (actualResponseNode.isObject()) {
+            Assertions.assertTrue(actualResponseNode.size() >= 0, "Object should have valid field count");
+        }
+    }
+
+    @Test
+    public void testRead() throws Exception {
+        server.enqueue(
+                new MockResponse()
+                        .setResponseCode(200)
+                        .setBody(
+                                "{\"agent_id\":\"agent_id\",\"name\":\"name\",\"created_at\":\"2024-01-15T09:30:00Z\",\"updated_at\":\"2024-01-15T09:30:00Z\",\"external_agent_id\":\"external_agent_id\",\"metadata\":{\"key\":\"value\"}}"));
+        AgentResponseContent response = client.agents().read("id");
+        RecordedRequest request = server.takeRequest();
+        Assertions.assertNotNull(request);
+        Assertions.assertEquals("GET", request.getMethod());
+
+        // Validate response body
+        Assertions.assertNotNull(response, "Response should not be null");
+        String actualResponseJson = objectMapper.writeValueAsString(response);
+        String expectedResponseBody = ""
+                + "{\n"
+                + "  \"agent_id\": \"agent_id\",\n"
+                + "  \"name\": \"name\",\n"
+                + "  \"created_at\": \"2024-01-15T09:30:00Z\",\n"
+                + "  \"updated_at\": \"2024-01-15T09:30:00Z\",\n"
+                + "  \"external_agent_id\": \"external_agent_id\",\n"
+                + "  \"metadata\": {\n"
+                + "    \"key\": \"value\"\n"
+                + "  }\n"
+                + "}";
+        JsonNode actualResponseNode = objectMapper.readTree(actualResponseJson);
+        JsonNode expectedResponseNode = objectMapper.readTree(expectedResponseBody);
+        Assertions.assertTrue(
+                jsonEquals(expectedResponseNode, actualResponseNode),
+                "Response body structure does not match expected");
+        if (actualResponseNode.has("type") || actualResponseNode.has("_type") || actualResponseNode.has("kind")) {
+            String discriminator = null;
+            if (actualResponseNode.has("type"))
+                discriminator = actualResponseNode.get("type").asText();
+            else if (actualResponseNode.has("_type"))
+                discriminator = actualResponseNode.get("_type").asText();
+            else if (actualResponseNode.has("kind"))
+                discriminator = actualResponseNode.get("kind").asText();
+            Assertions.assertNotNull(discriminator, "Union type should have a discriminator field");
+            Assertions.assertFalse(discriminator.isEmpty(), "Union discriminator should not be empty");
+        }
+
+        if (!actualResponseNode.isNull()) {
+            Assertions.assertTrue(
+                    actualResponseNode.isObject() || actualResponseNode.isArray() || actualResponseNode.isValueNode(),
+                    "response should be a valid JSON value");
+        }
+
+        if (actualResponseNode.isArray()) {
+            Assertions.assertTrue(actualResponseNode.size() >= 0, "Array should have valid size");
+        }
+        if (actualResponseNode.isObject()) {
+            Assertions.assertTrue(actualResponseNode.size() >= 0, "Object should have valid field count");
+        }
+    }
+
+    @Test
+    public void testDelete() throws Exception {
+        server.enqueue(new MockResponse().setResponseCode(200).setBody("{}"));
+        client.agents().delete("id");
+        RecordedRequest request = server.takeRequest();
+        Assertions.assertNotNull(request);
+        Assertions.assertEquals("DELETE", request.getMethod());
+    }
+
+    @Test
+    public void testUpdate() throws Exception {
+        server.enqueue(
+                new MockResponse()
+                        .setResponseCode(200)
+                        .setBody(
+                                "{\"agent_id\":\"agent_id\",\"name\":\"name\",\"created_at\":\"2024-01-15T09:30:00Z\",\"updated_at\":\"2024-01-15T09:30:00Z\",\"external_agent_id\":\"external_agent_id\",\"metadata\":{\"key\":\"value\"}}"));
+        AgentResponseContent response = client.agents()
+                .update("id", PatchAgentRequestParameters.builder().build());
+        RecordedRequest request = server.takeRequest();
+        Assertions.assertNotNull(request);
+        Assertions.assertEquals("PATCH", request.getMethod());
+        // Validate request body
+        String actualRequestBody = request.getBody().readUtf8();
+        String expectedRequestBody = "" + "{}";
+        JsonNode actualJson = objectMapper.readTree(actualRequestBody);
+        JsonNode expectedJson = objectMapper.readTree(expectedRequestBody);
+        Assertions.assertTrue(jsonEquals(expectedJson, actualJson), "Request body structure does not match expected");
+        if (actualJson.has("type") || actualJson.has("_type") || actualJson.has("kind")) {
+            String discriminator = null;
+            if (actualJson.has("type")) discriminator = actualJson.get("type").asText();
+            else if (actualJson.has("_type"))
+                discriminator = actualJson.get("_type").asText();
+            else if (actualJson.has("kind"))
+                discriminator = actualJson.get("kind").asText();
+            Assertions.assertNotNull(discriminator, "Union type should have a discriminator field");
+            Assertions.assertFalse(discriminator.isEmpty(), "Union discriminator should not be empty");
+        }
+
+        if (!actualJson.isNull()) {
+            Assertions.assertTrue(
+                    actualJson.isObject() || actualJson.isArray() || actualJson.isValueNode(),
+                    "request should be a valid JSON value");
+        }
+
+        if (actualJson.isArray()) {
+            Assertions.assertTrue(actualJson.size() >= 0, "Array should have valid size");
+        }
+        if (actualJson.isObject()) {
+            Assertions.assertTrue(actualJson.size() >= 0, "Object should have valid field count");
+        }
+
+        // Validate response body
+        Assertions.assertNotNull(response, "Response should not be null");
+        String actualResponseJson = objectMapper.writeValueAsString(response);
+        String expectedResponseBody = ""
+                + "{\n"
+                + "  \"agent_id\": \"agent_id\",\n"
+                + "  \"name\": \"name\",\n"
+                + "  \"created_at\": \"2024-01-15T09:30:00Z\",\n"
+                + "  \"updated_at\": \"2024-01-15T09:30:00Z\",\n"
+                + "  \"external_agent_id\": \"external_agent_id\",\n"
+                + "  \"metadata\": {\n"
+                + "    \"key\": \"value\"\n"
+                + "  }\n"
+                + "}";
+        JsonNode actualResponseNode = objectMapper.readTree(actualResponseJson);
+        JsonNode expectedResponseNode = objectMapper.readTree(expectedResponseBody);
+        Assertions.assertTrue(
+                jsonEquals(expectedResponseNode, actualResponseNode),
+                "Response body structure does not match expected");
+        if (actualResponseNode.has("type") || actualResponseNode.has("_type") || actualResponseNode.has("kind")) {
+            String discriminator = null;
+            if (actualResponseNode.has("type"))
+                discriminator = actualResponseNode.get("type").asText();
+            else if (actualResponseNode.has("_type"))
+                discriminator = actualResponseNode.get("_type").asText();
+            else if (actualResponseNode.has("kind"))
+                discriminator = actualResponseNode.get("kind").asText();
+            Assertions.assertNotNull(discriminator, "Union type should have a discriminator field");
+            Assertions.assertFalse(discriminator.isEmpty(), "Union discriminator should not be empty");
+        }
+
+        if (!actualResponseNode.isNull()) {
+            Assertions.assertTrue(
+                    actualResponseNode.isObject() || actualResponseNode.isArray() || actualResponseNode.isValueNode(),
+                    "response should be a valid JSON value");
+        }
+
+        if (actualResponseNode.isArray()) {
+            Assertions.assertTrue(actualResponseNode.size() >= 0, "Array should have valid size");
+        }
+        if (actualResponseNode.isObject()) {
+            Assertions.assertTrue(actualResponseNode.size() >= 0, "Object should have valid field count");
+        }
+    }
+
+    /**
+     * Compares two JsonNodes with numeric equivalence and null safety.
+     * For objects, checks that all fields in 'expected' exist in 'actual' with matching values.
+     * Allows 'actual' to have extra fields (e.g., default values added during serialization).
+     */
+    private boolean jsonEquals(JsonNode expected, JsonNode actual) {
+        if (expected == null && actual == null) return true;
+        if (expected == null || actual == null) return false;
+        if (expected.equals(actual)) return true;
+        if (expected.isNumber() && actual.isNumber())
+            return Math.abs(expected.doubleValue() - actual.doubleValue()) < 1e-10;
+        if (expected.isObject() && actual.isObject()) {
+            java.util.Iterator<java.util.Map.Entry<String, JsonNode>> iter = expected.fields();
+            while (iter.hasNext()) {
+                java.util.Map.Entry<String, JsonNode> entry = iter.next();
+                JsonNode actualValue = actual.get(entry.getKey());
+                if (actualValue == null) {
+                    if (!entry.getValue().isNull()) return false;
+                } else if (!jsonEquals(entry.getValue(), actualValue)) return false;
+            }
+            return true;
+        }
+        if (expected.isArray() && actual.isArray()) {
+            if (expected.size() != actual.size()) return false;
+            for (int i = 0; i < expected.size(); i++) {
+                if (!jsonEquals(expected.get(i), actual.get(i))) return false;
+            }
+            return true;
+        }
+        return false;
+    }
+}
diff --git a/src/test/java/com/auth0/client/mgmt/ClientGrantsOrganizationsWireTest.java b/src/test/java/com/auth0/client/mgmt/ClientGrantsOrganizationsWireTest.java
index 4eed91a6..f1d28974 100644
--- a/src/test/java/com/auth0/client/mgmt/ClientGrantsOrganizationsWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/ClientGrantsOrganizationsWireTest.java
@@ -40,12 +40,13 @@ public void testList() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "{\"next\":\"next\",\"organizations\":[{\"id\":\"id\",\"name\":\"name\",\"display_name\":\"display_name\",\"token_quota\":{\"client_credentials\":{}},\"third_party_client_access\":\"block\"}]}"));
+                                "{\"next\":\"next\",\"organizations\":[{\"id\":\"id\",\"name\":\"name\",\"display_name\":\"display_name\",\"token_quota\":{\"client_credentials\":{}},\"third_party_client_access\":\"block\",\"is_app_entitlement_active\":true}]}"));
         SyncPagingIterable<Organization> response = client.clientGrants()
                 .organizations()
                 .list(
                         "id",
                         ListClientGrantOrganizationsRequestParameters.builder()
+                                .includeTotals(true)
                                 .from("from")
                                 .take(1)
                                 .build());
diff --git a/src/test/java/com/auth0/client/mgmt/ClientGrantsWireTest.java b/src/test/java/com/auth0/client/mgmt/ClientGrantsWireTest.java
index 3a33b8d5..b799c286 100644
--- a/src/test/java/com/auth0/client/mgmt/ClientGrantsWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/ClientGrantsWireTest.java
@@ -50,6 +50,7 @@ public void testList() throws Exception {
                                 "{\"next\":\"next\",\"client_grants\":[{\"id\":\"id\",\"client_id\":\"client_id\",\"audience\":\"audience\",\"scope\":[\"scope\"],\"organization_usage\":\"deny\",\"allow_any_organization\":true,\"default_for\":\"third_party_clients\",\"is_system\":true,\"subject_type\":\"client\",\"authorization_details_types\":[\"authorization_details_types\"],\"allow_all_scopes\":true}]}"));
         SyncPagingIterable<ClientGrantResponseContent> response = client.clientGrants()
                 .list(ListClientGrantsRequestParameters.builder()
+                        .includeTotals(true)
                         .from("from")
                         .take(1)
                         .audience("audience")
diff --git a/src/test/java/com/auth0/client/mgmt/ConnectionsDirectoryProvisioningWireTest.java b/src/test/java/com/auth0/client/mgmt/ConnectionsDirectoryProvisioningWireTest.java
index 19f3893b..b288e36b 100644
--- a/src/test/java/com/auth0/client/mgmt/ConnectionsDirectoryProvisioningWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/ConnectionsDirectoryProvisioningWireTest.java
@@ -1,5 +1,7 @@
 package com.auth0.client.mgmt;
 
+import com.auth0.client.mgmt.connections.types.AddSynchronizedGroupsRequestContent;
+import com.auth0.client.mgmt.connections.types.DeleteSynchronizedGroupsRequestContent;
 import com.auth0.client.mgmt.connections.types.ListDirectoryProvisioningsRequestParameters;
 import com.auth0.client.mgmt.connections.types.ListSynchronizedGroupsRequestParameters;
 import com.auth0.client.mgmt.connections.types.ReplaceSynchronizedGroupsRequestContent;
@@ -12,6 +14,7 @@
 import com.auth0.client.mgmt.types.GetDirectoryProvisioningDefaultMappingResponseContent;
 import com.auth0.client.mgmt.types.GetDirectoryProvisioningResponseContent;
 import com.auth0.client.mgmt.types.SynchronizedGroupPayload;
+import com.auth0.client.mgmt.types.SynchronizedGroupSelectionId;
 import com.auth0.client.mgmt.types.UpdateDirectoryProvisioningRequestContent;
 import com.auth0.client.mgmt.types.UpdateDirectoryProvisioningResponseContent;
 import com.fasterxml.jackson.databind.JsonNode;
@@ -340,7 +343,10 @@ else if (actualResponseNode.has("kind"))
     @Test
     public void testListSynchronizedGroups() throws Exception {
         server.enqueue(
-                new MockResponse().setResponseCode(200).setBody("{\"groups\":[{\"id\":\"id\"}],\"next\":\"next\"}"));
+                new MockResponse()
+                        .setResponseCode(200)
+                        .setBody(
+                                "{\"groups\":[{\"id\":\"id\",\"name\":\"name\",\"email\":\"email\",\"direct_members_count\":1}],\"next\":\"next\"}"));
         SyncPagingIterable<SynchronizedGroupPayload> response = client.connections()
                 .directoryProvisioning()
                 .listSynchronizedGroups(
@@ -348,6 +354,7 @@ public void testListSynchronizedGroups() throws Exception {
                         ListSynchronizedGroupsRequestParameters.builder()
                                 .from("from")
                                 .take(1)
+                                .q("q")
                                 .build());
         RecordedRequest request = server.takeRequest();
         Assertions.assertNotNull(request);
@@ -359,6 +366,53 @@ public void testListSynchronizedGroups() throws Exception {
         // The SDK correctly parses the response into a SyncPagingIterable
     }
 
+    @Test
+    public void testAddSynchronizedGroupSelections() throws Exception {
+        server.enqueue(new MockResponse().setResponseCode(200).setBody("{}"));
+        client.connections()
+                .directoryProvisioning()
+                .addSynchronizedGroupSelections(
+                        "id",
+                        AddSynchronizedGroupsRequestContent.builder()
+                                .groups(Arrays.asList(SynchronizedGroupPayload.builder()
+                                        .id("id")
+                                        .build()))
+                                .build());
+        RecordedRequest request = server.takeRequest();
+        Assertions.assertNotNull(request);
+        Assertions.assertEquals("POST", request.getMethod());
+        // Validate request body
+        String actualRequestBody = request.getBody().readUtf8();
+        String expectedRequestBody =
+                "" + "{\n" + "  \"groups\": [\n" + "    {\n" + "      \"id\": \"id\"\n" + "    }\n" + "  ]\n" + "}";
+        JsonNode actualJson = objectMapper.readTree(actualRequestBody);
+        JsonNode expectedJson = objectMapper.readTree(expectedRequestBody);
+        Assertions.assertTrue(jsonEquals(expectedJson, actualJson), "Request body structure does not match expected");
+        if (actualJson.has("type") || actualJson.has("_type") || actualJson.has("kind")) {
+            String discriminator = null;
+            if (actualJson.has("type")) discriminator = actualJson.get("type").asText();
+            else if (actualJson.has("_type"))
+                discriminator = actualJson.get("_type").asText();
+            else if (actualJson.has("kind"))
+                discriminator = actualJson.get("kind").asText();
+            Assertions.assertNotNull(discriminator, "Union type should have a discriminator field");
+            Assertions.assertFalse(discriminator.isEmpty(), "Union discriminator should not be empty");
+        }
+
+        if (!actualJson.isNull()) {
+            Assertions.assertTrue(
+                    actualJson.isObject() || actualJson.isArray() || actualJson.isValueNode(),
+                    "request should be a valid JSON value");
+        }
+
+        if (actualJson.isArray()) {
+            Assertions.assertTrue(actualJson.size() >= 0, "Array should have valid size");
+        }
+        if (actualJson.isObject()) {
+            Assertions.assertTrue(actualJson.size() >= 0, "Object should have valid field count");
+        }
+    }
+
     @Test
     public void testSet() throws Exception {
         server.enqueue(new MockResponse().setResponseCode(200).setBody("{}"));
@@ -406,6 +460,53 @@ else if (actualJson.has("kind"))
         }
     }
 
+    @Test
+    public void testDeleteSynchronizedGroupSelections() throws Exception {
+        server.enqueue(new MockResponse().setResponseCode(200).setBody("{}"));
+        client.connections()
+                .directoryProvisioning()
+                .deleteSynchronizedGroupSelections(
+                        "id",
+                        DeleteSynchronizedGroupsRequestContent.builder()
+                                .groups(Arrays.asList(SynchronizedGroupSelectionId.builder()
+                                        .id("id")
+                                        .build()))
+                                .build());
+        RecordedRequest request = server.takeRequest();
+        Assertions.assertNotNull(request);
+        Assertions.assertEquals("DELETE", request.getMethod());
+        // Validate request body
+        String actualRequestBody = request.getBody().readUtf8();
+        String expectedRequestBody =
+                "" + "{\n" + "  \"groups\": [\n" + "    {\n" + "      \"id\": \"id\"\n" + "    }\n" + "  ]\n" + "}";
+        JsonNode actualJson = objectMapper.readTree(actualRequestBody);
+        JsonNode expectedJson = objectMapper.readTree(expectedRequestBody);
+        Assertions.assertTrue(jsonEquals(expectedJson, actualJson), "Request body structure does not match expected");
+        if (actualJson.has("type") || actualJson.has("_type") || actualJson.has("kind")) {
+            String discriminator = null;
+            if (actualJson.has("type")) discriminator = actualJson.get("type").asText();
+            else if (actualJson.has("_type"))
+                discriminator = actualJson.get("_type").asText();
+            else if (actualJson.has("kind"))
+                discriminator = actualJson.get("kind").asText();
+            Assertions.assertNotNull(discriminator, "Union type should have a discriminator field");
+            Assertions.assertFalse(discriminator.isEmpty(), "Union discriminator should not be empty");
+        }
+
+        if (!actualJson.isNull()) {
+            Assertions.assertTrue(
+                    actualJson.isObject() || actualJson.isArray() || actualJson.isValueNode(),
+                    "request should be a valid JSON value");
+        }
+
+        if (actualJson.isArray()) {
+            Assertions.assertTrue(actualJson.size() >= 0, "Array should have valid size");
+        }
+        if (actualJson.isObject()) {
+            Assertions.assertTrue(actualJson.size() >= 0, "Object should have valid field count");
+        }
+    }
+
     /**
      * Compares two JsonNodes with numeric equivalence and null safety.
      * For objects, checks that all fields in 'expected' exist in 'actual' with matching values.
diff --git a/src/test/java/com/auth0/client/mgmt/ConnectionsWireTest.java b/src/test/java/com/auth0/client/mgmt/ConnectionsWireTest.java
index 95689f6c..2514b5f3 100644
--- a/src/test/java/com/auth0/client/mgmt/ConnectionsWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/ConnectionsWireTest.java
@@ -52,6 +52,7 @@ public void testList() throws Exception {
                                 "{\"next\":\"next\",\"connections\":[{\"name\":\"name\",\"display_name\":\"display_name\",\"options\":{\"key\":\"value\"},\"id\":\"id\",\"strategy\":\"strategy\",\"realms\":[\"realms\"],\"is_domain_connection\":true,\"show_as_button\":true,\"authentication\":{\"active\":true},\"connected_accounts\":{\"active\":true},\"cross_app_access_requesting_app\":{\"active\":true},\"cross_app_access_resource_app\":{\"status\":\"enabled\"}}]}"));
         SyncPagingIterable<ConnectionForList> response = client.connections()
                 .list(ListConnectionsQueryParameters.builder()
+                        .includeTotals(true)
                         .from("from")
                         .take(1)
                         .name("name")
@@ -75,7 +76,7 @@ public void testCreate() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "{\"name\":\"name\",\"display_name\":\"display_name\",\"options\":{\"key\":\"value\"},\"id\":\"id\",\"strategy\":\"strategy\",\"realms\":[\"realms\"],\"enabled_clients\":[\"enabled_clients\"],\"is_domain_connection\":true,\"show_as_button\":true,\"metadata\":{\"key\":\"value\"},\"authentication\":{\"active\":true},\"connected_accounts\":{\"active\":true,\"cross_app_access\":true},\"cross_app_access_requesting_app\":{\"active\":true},\"cross_app_access_resource_app\":{\"status\":\"enabled\"}}"));
+                                "{\"name\":\"name\",\"display_name\":\"display_name\",\"options\":{\"key\":\"value\"},\"id\":\"id\",\"strategy\":\"strategy\",\"realms\":[\"realms\"],\"enabled_clients\":[\"enabled_clients\"],\"is_domain_connection\":true,\"show_as_button\":true,\"metadata\":{\"key\":\"value\"},\"authentication\":{\"active\":true},\"connected_accounts\":{\"active\":true,\"cross_app_access\":true,\"allow_missing_user_id\":true},\"cross_app_access_requesting_app\":{\"active\":true},\"cross_app_access_resource_app\":{\"status\":\"enabled\"}}"));
         CreateConnectionResponseContent response = client.connections()
                 .create(CreateConnectionRequestContent.builder()
                         .name("name")
@@ -142,7 +143,8 @@ else if (actualJson.has("kind"))
                 + "  },\n"
                 + "  \"connected_accounts\": {\n"
                 + "    \"active\": true,\n"
-                + "    \"cross_app_access\": true\n"
+                + "    \"cross_app_access\": true,\n"
+                + "    \"allow_missing_user_id\": true\n"
                 + "  },\n"
                 + "  \"cross_app_access_requesting_app\": {\n"
                 + "    \"active\": true\n"
@@ -188,7 +190,7 @@ public void testGet() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "{\"name\":\"name\",\"display_name\":\"display_name\",\"options\":{\"key\":\"value\"},\"id\":\"id\",\"strategy\":\"strategy\",\"realms\":[\"realms\"],\"enabled_clients\":[\"enabled_clients\"],\"is_domain_connection\":true,\"show_as_button\":true,\"metadata\":{\"key\":\"value\"},\"authentication\":{\"active\":true},\"connected_accounts\":{\"active\":true,\"cross_app_access\":true},\"cross_app_access_requesting_app\":{\"active\":true},\"cross_app_access_resource_app\":{\"status\":\"enabled\"}}"));
+                                "{\"name\":\"name\",\"display_name\":\"display_name\",\"options\":{\"key\":\"value\"},\"id\":\"id\",\"strategy\":\"strategy\",\"realms\":[\"realms\"],\"enabled_clients\":[\"enabled_clients\"],\"is_domain_connection\":true,\"show_as_button\":true,\"metadata\":{\"key\":\"value\"},\"authentication\":{\"active\":true},\"connected_accounts\":{\"active\":true,\"cross_app_access\":true,\"allow_missing_user_id\":true},\"cross_app_access_requesting_app\":{\"active\":true},\"cross_app_access_resource_app\":{\"status\":\"enabled\"}}"));
         GetConnectionResponseContent response = client.connections()
                 .get(
                         "id",
@@ -228,7 +230,8 @@ public void testGet() throws Exception {
                 + "  },\n"
                 + "  \"connected_accounts\": {\n"
                 + "    \"active\": true,\n"
-                + "    \"cross_app_access\": true\n"
+                + "    \"cross_app_access\": true,\n"
+                + "    \"allow_missing_user_id\": true\n"
                 + "  },\n"
                 + "  \"cross_app_access_requesting_app\": {\n"
                 + "    \"active\": true\n"
@@ -283,7 +286,7 @@ public void testUpdate() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "{\"name\":\"name\",\"display_name\":\"display_name\",\"options\":{\"key\":\"value\"},\"id\":\"id\",\"strategy\":\"strategy\",\"realms\":[\"realms\"],\"enabled_clients\":[\"enabled_clients\"],\"is_domain_connection\":true,\"show_as_button\":true,\"metadata\":{\"key\":\"value\"},\"authentication\":{\"active\":true},\"connected_accounts\":{\"active\":true,\"cross_app_access\":true},\"cross_app_access_requesting_app\":{\"active\":true},\"cross_app_access_resource_app\":{\"status\":\"enabled\"}}"));
+                                "{\"name\":\"name\",\"display_name\":\"display_name\",\"options\":{\"key\":\"value\"},\"id\":\"id\",\"strategy\":\"strategy\",\"realms\":[\"realms\"],\"enabled_clients\":[\"enabled_clients\"],\"is_domain_connection\":true,\"show_as_button\":true,\"metadata\":{\"key\":\"value\"},\"authentication\":{\"active\":true},\"connected_accounts\":{\"active\":true,\"cross_app_access\":true,\"allow_missing_user_id\":true},\"cross_app_access_requesting_app\":{\"active\":true},\"cross_app_access_resource_app\":{\"status\":\"enabled\"}}"));
         UpdateConnectionResponseContent response = client.connections()
                 .update("id", UpdateConnectionRequestContent.builder().build());
         RecordedRequest request = server.takeRequest();
@@ -347,7 +350,8 @@ else if (actualJson.has("kind"))
                 + "  },\n"
                 + "  \"connected_accounts\": {\n"
                 + "    \"active\": true,\n"
-                + "    \"cross_app_access\": true\n"
+                + "    \"cross_app_access\": true,\n"
+                + "    \"allow_missing_user_id\": true\n"
                 + "  },\n"
                 + "  \"cross_app_access_requesting_app\": {\n"
                 + "    \"active\": true\n"
diff --git a/src/test/java/com/auth0/client/mgmt/EventStreamsDeliveriesWireTest.java b/src/test/java/com/auth0/client/mgmt/EventStreamsDeliveriesWireTest.java
index f86d8b64..f2e929b9 100644
--- a/src/test/java/com/auth0/client/mgmt/EventStreamsDeliveriesWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/EventStreamsDeliveriesWireTest.java
@@ -1,12 +1,12 @@
 package com.auth0.client.mgmt;
 
 import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
 import com.auth0.client.mgmt.eventstreams.types.ListEventStreamDeliveriesRequestParameters;
 import com.auth0.client.mgmt.types.EventStreamDelivery;
 import com.auth0.client.mgmt.types.GetEventStreamDeliveryHistoryResponseContent;
 import com.fasterxml.jackson.databind.JsonNode;
 import com.fasterxml.jackson.databind.ObjectMapper;
-import java.util.List;
 import okhttp3.mockwebserver.MockResponse;
 import okhttp3.mockwebserver.MockWebServer;
 import okhttp3.mockwebserver.RecordedRequest;
@@ -41,8 +41,8 @@ public void testList() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "[{\"id\":\"id\",\"event_stream_id\":\"event_stream_id\",\"status\":\"failed\",\"event_type\":\"connection.created\",\"attempts\":[{\"status\":\"failed\",\"timestamp\":\"2024-01-15T09:30:00Z\"}],\"event\":{\"id\":\"id\",\"source\":\"source\",\"specversion\":\"specversion\",\"type\":\"type\",\"time\":\"2024-01-15T09:30:00Z\",\"data\":\"data\"}}]"));
-        List<EventStreamDelivery> response = client.eventStreams()
+                                "{\"deliveries\":[{\"id\":\"id\",\"event_stream_id\":\"event_stream_id\",\"status\":\"failed\",\"event_type\":\"connection.created\",\"attempts\":[{\"status\":\"failed\",\"timestamp\":\"2024-01-15T09:30:00Z\"}]}],\"next\":\"next\"}"));
+        SyncPagingIterable<EventStreamDelivery> response = client.eventStreams()
                 .deliveries()
                 .list(
                         "id",
@@ -60,59 +60,8 @@ public void testList() throws Exception {
 
         // Validate response body
         Assertions.assertNotNull(response, "Response should not be null");
-        String actualResponseJson = objectMapper.writeValueAsString(response);
-        String expectedResponseBody = ""
-                + "[\n"
-                + "  {\n"
-                + "    \"id\": \"id\",\n"
-                + "    \"event_stream_id\": \"event_stream_id\",\n"
-                + "    \"status\": \"failed\",\n"
-                + "    \"event_type\": \"connection.created\",\n"
-                + "    \"attempts\": [\n"
-                + "      {\n"
-                + "        \"status\": \"failed\",\n"
-                + "        \"timestamp\": \"2024-01-15T09:30:00Z\"\n"
-                + "      }\n"
-                + "    ],\n"
-                + "    \"event\": {\n"
-                + "      \"id\": \"id\",\n"
-                + "      \"source\": \"source\",\n"
-                + "      \"specversion\": \"specversion\",\n"
-                + "      \"type\": \"type\",\n"
-                + "      \"time\": \"2024-01-15T09:30:00Z\",\n"
-                + "      \"data\": \"data\"\n"
-                + "    }\n"
-                + "  }\n"
-                + "]";
-        JsonNode actualResponseNode = objectMapper.readTree(actualResponseJson);
-        JsonNode expectedResponseNode = objectMapper.readTree(expectedResponseBody);
-        Assertions.assertTrue(
-                jsonEquals(expectedResponseNode, actualResponseNode),
-                "Response body structure does not match expected");
-        if (actualResponseNode.has("type") || actualResponseNode.has("_type") || actualResponseNode.has("kind")) {
-            String discriminator = null;
-            if (actualResponseNode.has("type"))
-                discriminator = actualResponseNode.get("type").asText();
-            else if (actualResponseNode.has("_type"))
-                discriminator = actualResponseNode.get("_type").asText();
-            else if (actualResponseNode.has("kind"))
-                discriminator = actualResponseNode.get("kind").asText();
-            Assertions.assertNotNull(discriminator, "Union type should have a discriminator field");
-            Assertions.assertFalse(discriminator.isEmpty(), "Union discriminator should not be empty");
-        }
-
-        if (!actualResponseNode.isNull()) {
-            Assertions.assertTrue(
-                    actualResponseNode.isObject() || actualResponseNode.isArray() || actualResponseNode.isValueNode(),
-                    "response should be a valid JSON value");
-        }
-
-        if (actualResponseNode.isArray()) {
-            Assertions.assertTrue(actualResponseNode.size() >= 0, "Array should have valid size");
-        }
-        if (actualResponseNode.isObject()) {
-            Assertions.assertTrue(actualResponseNode.size() >= 0, "Object should have valid field count");
-        }
+        // Pagination response validated via MockWebServer
+        // The SDK correctly parses the response into a SyncPagingIterable
     }
 
     @Test
@@ -121,7 +70,7 @@ public void testGetHistory() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "{\"id\":\"id\",\"event_stream_id\":\"event_stream_id\",\"status\":\"failed\",\"event_type\":\"connection.created\",\"attempts\":[{\"status\":\"failed\",\"timestamp\":\"2024-01-15T09:30:00Z\",\"error_message\":\"error_message\"}],\"event\":{\"id\":\"id\",\"source\":\"source\",\"specversion\":\"specversion\",\"type\":\"type\",\"time\":\"2024-01-15T09:30:00Z\",\"data\":\"data\"}}"));
+                                "{\"id\":\"id\",\"event_stream_id\":\"event_stream_id\",\"status\":\"failed\",\"event_type\":\"connection.created\",\"attempts\":[{\"status\":\"failed\",\"timestamp\":\"2024-01-15T09:30:00Z\",\"error_message\":\"error_message\",\"duration\":1.1}],\"event\":{\"id\":\"id\",\"source\":\"source\",\"specversion\":\"specversion\",\"type\":\"type\",\"time\":\"2024-01-15T09:30:00Z\",\"data\":{\"key\":\"value\"}}}"));
         GetEventStreamDeliveryHistoryResponseContent response =
                 client.eventStreams().deliveries().getHistory("id", "event_id");
         RecordedRequest request = server.takeRequest();
@@ -141,7 +90,8 @@ public void testGetHistory() throws Exception {
                 + "    {\n"
                 + "      \"status\": \"failed\",\n"
                 + "      \"timestamp\": \"2024-01-15T09:30:00Z\",\n"
-                + "      \"error_message\": \"error_message\"\n"
+                + "      \"error_message\": \"error_message\",\n"
+                + "      \"duration\": 1.1\n"
                 + "    }\n"
                 + "  ],\n"
                 + "  \"event\": {\n"
@@ -150,7 +100,9 @@ public void testGetHistory() throws Exception {
                 + "    \"specversion\": \"specversion\",\n"
                 + "    \"type\": \"type\",\n"
                 + "    \"time\": \"2024-01-15T09:30:00Z\",\n"
-                + "    \"data\": \"data\"\n"
+                + "    \"data\": {\n"
+                + "      \"key\": \"value\"\n"
+                + "    }\n"
                 + "  }\n"
                 + "}";
         JsonNode actualResponseNode = objectMapper.readTree(actualResponseJson);
diff --git a/src/test/java/com/auth0/client/mgmt/EventStreamsWireTest.java b/src/test/java/com/auth0/client/mgmt/EventStreamsWireTest.java
index 3872db15..19fc279d 100644
--- a/src/test/java/com/auth0/client/mgmt/EventStreamsWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/EventStreamsWireTest.java
@@ -377,7 +377,7 @@ public void testTest() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "{\"id\":\"id\",\"event_stream_id\":\"event_stream_id\",\"status\":\"failed\",\"event_type\":\"connection.created\",\"attempts\":[{\"status\":\"failed\",\"timestamp\":\"2024-01-15T09:30:00Z\",\"error_message\":\"error_message\"}],\"event\":{\"id\":\"id\",\"source\":\"source\",\"specversion\":\"specversion\",\"type\":\"type\",\"time\":\"2024-01-15T09:30:00Z\",\"data\":\"data\"}}"));
+                                "{\"id\":\"id\",\"event_stream_id\":\"event_stream_id\",\"status\":\"failed\",\"event_type\":\"connection.created\",\"attempts\":[{\"status\":\"failed\",\"timestamp\":\"2024-01-15T09:30:00Z\",\"error_message\":\"error_message\",\"duration\":1.1}],\"event\":{\"id\":\"id\",\"source\":\"source\",\"specversion\":\"specversion\",\"type\":\"type\",\"time\":\"2024-01-15T09:30:00Z\",\"data\":{\"key\":\"value\"}}}"));
         CreateEventStreamTestEventResponseContent response = client.eventStreams()
                 .test(
                         "id",
@@ -430,7 +430,8 @@ else if (actualJson.has("kind"))
                 + "    {\n"
                 + "      \"status\": \"failed\",\n"
                 + "      \"timestamp\": \"2024-01-15T09:30:00Z\",\n"
-                + "      \"error_message\": \"error_message\"\n"
+                + "      \"error_message\": \"error_message\",\n"
+                + "      \"duration\": 1.1\n"
                 + "    }\n"
                 + "  ],\n"
                 + "  \"event\": {\n"
@@ -439,7 +440,9 @@ else if (actualJson.has("kind"))
                 + "    \"specversion\": \"specversion\",\n"
                 + "    \"type\": \"type\",\n"
                 + "    \"time\": \"2024-01-15T09:30:00Z\",\n"
-                + "    \"data\": \"data\"\n"
+                + "    \"data\": {\n"
+                + "      \"key\": \"value\"\n"
+                + "    }\n"
                 + "  }\n"
                 + "}";
         JsonNode actualResponseNode = objectMapper.readTree(actualResponseJson);
diff --git a/src/test/java/com/auth0/client/mgmt/FlowsExecutionsWireTest.java b/src/test/java/com/auth0/client/mgmt/FlowsExecutionsWireTest.java
index 7d1ae52d..11f2e9bb 100644
--- a/src/test/java/com/auth0/client/mgmt/FlowsExecutionsWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/FlowsExecutionsWireTest.java
@@ -50,6 +50,7 @@ public void testList() throws Exception {
                 .list(
                         "flow_id",
                         ListFlowExecutionsRequestParameters.builder()
+                                .includeTotals(true)
                                 .from("from")
                                 .take(1)
                                 .build());
diff --git a/src/test/java/com/auth0/client/mgmt/GroupsRolesWireTest.java b/src/test/java/com/auth0/client/mgmt/GroupsRolesWireTest.java
index 921d6267..e9f373ec 100644
--- a/src/test/java/com/auth0/client/mgmt/GroupsRolesWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/GroupsRolesWireTest.java
@@ -43,7 +43,7 @@ public void testList() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "{\"roles\":[{\"id\":\"id\",\"name\":\"name\",\"description\":\"description\"}],\"next\":\"next\"}"));
+                                "{\"roles\":[{\"id\":\"id\",\"name\":\"name\",\"description\":\"description\",\"type\":\"tenant\",\"owner_id\":\"owner_id\"}],\"next\":\"next\"}"));
         SyncPagingIterable<Role> response = client.groups()
                 .roles()
                 .list(
diff --git a/src/test/java/com/auth0/client/mgmt/GroupsWireTest.java b/src/test/java/com/auth0/client/mgmt/GroupsWireTest.java
index 47a11f02..64e9da7e 100644
--- a/src/test/java/com/auth0/client/mgmt/GroupsWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/GroupsWireTest.java
@@ -50,6 +50,7 @@ public void testList() throws Exception {
                         .search("search")
                         .fields("fields")
                         .includeFields(true)
+                        .includeTotals(true)
                         .from("from")
                         .take(1)
                         .build());
diff --git a/src/test/java/com/auth0/client/mgmt/GuardianFactorsWireTest.java b/src/test/java/com/auth0/client/mgmt/GuardianFactorsWireTest.java
index 54bb94f0..11fc9df4 100644
--- a/src/test/java/com/auth0/client/mgmt/GuardianFactorsWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/GuardianFactorsWireTest.java
@@ -38,9 +38,11 @@ public void teardown() throws Exception {
 
     @Test
     public void testList() throws Exception {
-        server.enqueue(new MockResponse()
-                .setResponseCode(200)
-                .setBody("[{\"enabled\":true,\"trial_expired\":true,\"name\":\"push-notification\"}]"));
+        server.enqueue(
+                new MockResponse()
+                        .setResponseCode(200)
+                        .setBody(
+                                "[{\"enabled\":true,\"trial_expired\":true,\"name\":\"push-notification\",\"settings\":{\"otp_length\":1,\"otp_expiration_time\":1}}]"));
         List<GuardianFactor> response = client.guardian().factors().list();
         RecordedRequest request = server.takeRequest();
         Assertions.assertNotNull(request);
@@ -54,7 +56,11 @@ public void testList() throws Exception {
                 + "  {\n"
                 + "    \"enabled\": true,\n"
                 + "    \"trial_expired\": true,\n"
-                + "    \"name\": \"push-notification\"\n"
+                + "    \"name\": \"push-notification\",\n"
+                + "    \"settings\": {\n"
+                + "      \"otp_length\": 1,\n"
+                + "      \"otp_expiration_time\": 1\n"
+                + "    }\n"
                 + "  }\n"
                 + "]";
         JsonNode actualResponseNode = objectMapper.readTree(actualResponseJson);
diff --git a/src/test/java/com/auth0/client/mgmt/OrganizationsClientsWireTest.java b/src/test/java/com/auth0/client/mgmt/OrganizationsClientsWireTest.java
new file mode 100644
index 00000000..7b36c7bd
--- /dev/null
+++ b/src/test/java/com/auth0/client/mgmt/OrganizationsClientsWireTest.java
@@ -0,0 +1,411 @@
+package com.auth0.client.mgmt;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
+import com.auth0.client.mgmt.organizations.types.CreateOrganizationClientsRequestContent;
+import com.auth0.client.mgmt.organizations.types.DeleteOrganizationClientsRequestContent;
+import com.auth0.client.mgmt.organizations.types.ListOrganizationClientsRequestParameters;
+import com.auth0.client.mgmt.organizations.types.UpdateOrganizationClientRequestContent;
+import com.auth0.client.mgmt.types.CreateOrganizationClientRequestItem;
+import com.auth0.client.mgmt.types.GetOrganizationClientResponseContent;
+import com.auth0.client.mgmt.types.OrganizationClient;
+import com.auth0.client.mgmt.types.UpdateOrganizationClientResponseContent;
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import java.util.Arrays;
+import java.util.List;
+import okhttp3.mockwebserver.MockResponse;
+import okhttp3.mockwebserver.MockWebServer;
+import okhttp3.mockwebserver.RecordedRequest;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.Assertions;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+
+public class OrganizationsClientsWireTest {
+    private MockWebServer server;
+    private ManagementApi client;
+    private ObjectMapper objectMapper = ObjectMappers.JSON_MAPPER;
+
+    @BeforeEach
+    public void setup() throws Exception {
+        server = new MockWebServer();
+        server.start();
+        client = ManagementApi.builder()
+                .url(server.url("/").toString())
+                .token("test-token")
+                .build();
+    }
+
+    @AfterEach
+    public void teardown() throws Exception {
+        server.shutdown();
+    }
+
+    @Test
+    public void testList() throws Exception {
+        server.enqueue(
+                new MockResponse()
+                        .setResponseCode(200)
+                        .setBody(
+                                "{\"clients\":[{\"client_id\":\"client_id\",\"use_for_member_access\":true,\"client\":{}}],\"next\":\"next\"}"));
+        SyncPagingIterable<OrganizationClient> response = client.organizations()
+                .clients()
+                .list(
+                        "id",
+                        ListOrganizationClientsRequestParameters.builder()
+                                .from("from")
+                                .take(1)
+                                .build());
+        RecordedRequest request = server.takeRequest();
+        Assertions.assertNotNull(request);
+        Assertions.assertEquals("GET", request.getMethod());
+
+        // Validate response body
+        Assertions.assertNotNull(response, "Response should not be null");
+        // Pagination response validated via MockWebServer
+        // The SDK correctly parses the response into a SyncPagingIterable
+    }
+
+    @Test
+    public void testCreate() throws Exception {
+        server.enqueue(
+                new MockResponse()
+                        .setResponseCode(200)
+                        .setBody(
+                                "[{\"client_id\":\"client_id\",\"use_for_member_access\":true,\"client\":{\"name\":\"name\",\"app_type\":\"app_type\",\"logo_uri\":\"logo_uri\",\"is_first_party\":true,\"grant_types\":[\"grant_types\"],\"organization_usage\":\"deny\"}}]"));
+        List<OrganizationClient> response = client.organizations()
+                .clients()
+                .create(
+                        "id",
+                        CreateOrganizationClientsRequestContent.builder()
+                                .clients(Arrays.asList(CreateOrganizationClientRequestItem.builder()
+                                        .clientId("client_id")
+                                        .useForMemberAccess(true)
+                                        .build()))
+                                .build());
+        RecordedRequest request = server.takeRequest();
+        Assertions.assertNotNull(request);
+        Assertions.assertEquals("POST", request.getMethod());
+        // Validate request body
+        String actualRequestBody = request.getBody().readUtf8();
+        String expectedRequestBody = ""
+                + "{\n"
+                + "  \"clients\": [\n"
+                + "    {\n"
+                + "      \"client_id\": \"client_id\",\n"
+                + "      \"use_for_member_access\": true\n"
+                + "    }\n"
+                + "  ]\n"
+                + "}";
+        JsonNode actualJson = objectMapper.readTree(actualRequestBody);
+        JsonNode expectedJson = objectMapper.readTree(expectedRequestBody);
+        Assertions.assertTrue(jsonEquals(expectedJson, actualJson), "Request body structure does not match expected");
+        if (actualJson.has("type") || actualJson.has("_type") || actualJson.has("kind")) {
+            String discriminator = null;
+            if (actualJson.has("type")) discriminator = actualJson.get("type").asText();
+            else if (actualJson.has("_type"))
+                discriminator = actualJson.get("_type").asText();
+            else if (actualJson.has("kind"))
+                discriminator = actualJson.get("kind").asText();
+            Assertions.assertNotNull(discriminator, "Union type should have a discriminator field");
+            Assertions.assertFalse(discriminator.isEmpty(), "Union discriminator should not be empty");
+        }
+
+        if (!actualJson.isNull()) {
+            Assertions.assertTrue(
+                    actualJson.isObject() || actualJson.isArray() || actualJson.isValueNode(),
+                    "request should be a valid JSON value");
+        }
+
+        if (actualJson.isArray()) {
+            Assertions.assertTrue(actualJson.size() >= 0, "Array should have valid size");
+        }
+        if (actualJson.isObject()) {
+            Assertions.assertTrue(actualJson.size() >= 0, "Object should have valid field count");
+        }
+
+        // Validate response body
+        Assertions.assertNotNull(response, "Response should not be null");
+        String actualResponseJson = objectMapper.writeValueAsString(response);
+        String expectedResponseBody = ""
+                + "[\n"
+                + "  {\n"
+                + "    \"client_id\": \"client_id\",\n"
+                + "    \"use_for_member_access\": true,\n"
+                + "    \"client\": {\n"
+                + "      \"name\": \"name\",\n"
+                + "      \"app_type\": \"app_type\",\n"
+                + "      \"logo_uri\": \"logo_uri\",\n"
+                + "      \"is_first_party\": true,\n"
+                + "      \"grant_types\": [\n"
+                + "        \"grant_types\"\n"
+                + "      ],\n"
+                + "      \"organization_usage\": \"deny\"\n"
+                + "    }\n"
+                + "  }\n"
+                + "]";
+        JsonNode actualResponseNode = objectMapper.readTree(actualResponseJson);
+        JsonNode expectedResponseNode = objectMapper.readTree(expectedResponseBody);
+        Assertions.assertTrue(
+                jsonEquals(expectedResponseNode, actualResponseNode),
+                "Response body structure does not match expected");
+        if (actualResponseNode.has("type") || actualResponseNode.has("_type") || actualResponseNode.has("kind")) {
+            String discriminator = null;
+            if (actualResponseNode.has("type"))
+                discriminator = actualResponseNode.get("type").asText();
+            else if (actualResponseNode.has("_type"))
+                discriminator = actualResponseNode.get("_type").asText();
+            else if (actualResponseNode.has("kind"))
+                discriminator = actualResponseNode.get("kind").asText();
+            Assertions.assertNotNull(discriminator, "Union type should have a discriminator field");
+            Assertions.assertFalse(discriminator.isEmpty(), "Union discriminator should not be empty");
+        }
+
+        if (!actualResponseNode.isNull()) {
+            Assertions.assertTrue(
+                    actualResponseNode.isObject() || actualResponseNode.isArray() || actualResponseNode.isValueNode(),
+                    "response should be a valid JSON value");
+        }
+
+        if (actualResponseNode.isArray()) {
+            Assertions.assertTrue(actualResponseNode.size() >= 0, "Array should have valid size");
+        }
+        if (actualResponseNode.isObject()) {
+            Assertions.assertTrue(actualResponseNode.size() >= 0, "Object should have valid field count");
+        }
+    }
+
+    @Test
+    public void testDelete() throws Exception {
+        server.enqueue(new MockResponse().setResponseCode(200).setBody("{}"));
+        client.organizations()
+                .clients()
+                .delete(
+                        "id",
+                        DeleteOrganizationClientsRequestContent.builder()
+                                .clients(Arrays.asList("clients"))
+                                .build());
+        RecordedRequest request = server.takeRequest();
+        Assertions.assertNotNull(request);
+        Assertions.assertEquals("DELETE", request.getMethod());
+        // Validate request body
+        String actualRequestBody = request.getBody().readUtf8();
+        String expectedRequestBody = "" + "{\n" + "  \"clients\": [\n" + "    \"clients\"\n" + "  ]\n" + "}";
+        JsonNode actualJson = objectMapper.readTree(actualRequestBody);
+        JsonNode expectedJson = objectMapper.readTree(expectedRequestBody);
+        Assertions.assertTrue(jsonEquals(expectedJson, actualJson), "Request body structure does not match expected");
+        if (actualJson.has("type") || actualJson.has("_type") || actualJson.has("kind")) {
+            String discriminator = null;
+            if (actualJson.has("type")) discriminator = actualJson.get("type").asText();
+            else if (actualJson.has("_type"))
+                discriminator = actualJson.get("_type").asText();
+            else if (actualJson.has("kind"))
+                discriminator = actualJson.get("kind").asText();
+            Assertions.assertNotNull(discriminator, "Union type should have a discriminator field");
+            Assertions.assertFalse(discriminator.isEmpty(), "Union discriminator should not be empty");
+        }
+
+        if (!actualJson.isNull()) {
+            Assertions.assertTrue(
+                    actualJson.isObject() || actualJson.isArray() || actualJson.isValueNode(),
+                    "request should be a valid JSON value");
+        }
+
+        if (actualJson.isArray()) {
+            Assertions.assertTrue(actualJson.size() >= 0, "Array should have valid size");
+        }
+        if (actualJson.isObject()) {
+            Assertions.assertTrue(actualJson.size() >= 0, "Object should have valid field count");
+        }
+    }
+
+    @Test
+    public void testGet() throws Exception {
+        server.enqueue(
+                new MockResponse()
+                        .setResponseCode(200)
+                        .setBody(
+                                "{\"client_id\":\"client_id\",\"use_for_member_access\":true,\"client\":{\"name\":\"name\",\"app_type\":\"app_type\",\"logo_uri\":\"logo_uri\",\"is_first_party\":true,\"grant_types\":[\"grant_types\"],\"organization_usage\":\"deny\"}}"));
+        GetOrganizationClientResponseContent response =
+                client.organizations().clients().get("id", "client_id");
+        RecordedRequest request = server.takeRequest();
+        Assertions.assertNotNull(request);
+        Assertions.assertEquals("GET", request.getMethod());
+
+        // Validate response body
+        Assertions.assertNotNull(response, "Response should not be null");
+        String actualResponseJson = objectMapper.writeValueAsString(response);
+        String expectedResponseBody = ""
+                + "{\n"
+                + "  \"client_id\": \"client_id\",\n"
+                + "  \"use_for_member_access\": true,\n"
+                + "  \"client\": {\n"
+                + "    \"name\": \"name\",\n"
+                + "    \"app_type\": \"app_type\",\n"
+                + "    \"logo_uri\": \"logo_uri\",\n"
+                + "    \"is_first_party\": true,\n"
+                + "    \"grant_types\": [\n"
+                + "      \"grant_types\"\n"
+                + "    ],\n"
+                + "    \"organization_usage\": \"deny\"\n"
+                + "  }\n"
+                + "}";
+        JsonNode actualResponseNode = objectMapper.readTree(actualResponseJson);
+        JsonNode expectedResponseNode = objectMapper.readTree(expectedResponseBody);
+        Assertions.assertTrue(
+                jsonEquals(expectedResponseNode, actualResponseNode),
+                "Response body structure does not match expected");
+        if (actualResponseNode.has("type") || actualResponseNode.has("_type") || actualResponseNode.has("kind")) {
+            String discriminator = null;
+            if (actualResponseNode.has("type"))
+                discriminator = actualResponseNode.get("type").asText();
+            else if (actualResponseNode.has("_type"))
+                discriminator = actualResponseNode.get("_type").asText();
+            else if (actualResponseNode.has("kind"))
+                discriminator = actualResponseNode.get("kind").asText();
+            Assertions.assertNotNull(discriminator, "Union type should have a discriminator field");
+            Assertions.assertFalse(discriminator.isEmpty(), "Union discriminator should not be empty");
+        }
+
+        if (!actualResponseNode.isNull()) {
+            Assertions.assertTrue(
+                    actualResponseNode.isObject() || actualResponseNode.isArray() || actualResponseNode.isValueNode(),
+                    "response should be a valid JSON value");
+        }
+
+        if (actualResponseNode.isArray()) {
+            Assertions.assertTrue(actualResponseNode.size() >= 0, "Array should have valid size");
+        }
+        if (actualResponseNode.isObject()) {
+            Assertions.assertTrue(actualResponseNode.size() >= 0, "Object should have valid field count");
+        }
+    }
+
+    @Test
+    public void testUpdate() throws Exception {
+        server.enqueue(
+                new MockResponse()
+                        .setResponseCode(200)
+                        .setBody(
+                                "{\"client_id\":\"client_id\",\"use_for_member_access\":true,\"client\":{\"name\":\"name\",\"app_type\":\"app_type\",\"logo_uri\":\"logo_uri\",\"is_first_party\":true,\"grant_types\":[\"grant_types\"],\"organization_usage\":\"deny\"}}"));
+        UpdateOrganizationClientResponseContent response = client.organizations()
+                .clients()
+                .update(
+                        "id",
+                        "client_id",
+                        UpdateOrganizationClientRequestContent.builder().build());
+        RecordedRequest request = server.takeRequest();
+        Assertions.assertNotNull(request);
+        Assertions.assertEquals("PATCH", request.getMethod());
+        // Validate request body
+        String actualRequestBody = request.getBody().readUtf8();
+        String expectedRequestBody = "" + "{}";
+        JsonNode actualJson = objectMapper.readTree(actualRequestBody);
+        JsonNode expectedJson = objectMapper.readTree(expectedRequestBody);
+        Assertions.assertTrue(jsonEquals(expectedJson, actualJson), "Request body structure does not match expected");
+        if (actualJson.has("type") || actualJson.has("_type") || actualJson.has("kind")) {
+            String discriminator = null;
+            if (actualJson.has("type")) discriminator = actualJson.get("type").asText();
+            else if (actualJson.has("_type"))
+                discriminator = actualJson.get("_type").asText();
+            else if (actualJson.has("kind"))
+                discriminator = actualJson.get("kind").asText();
+            Assertions.assertNotNull(discriminator, "Union type should have a discriminator field");
+            Assertions.assertFalse(discriminator.isEmpty(), "Union discriminator should not be empty");
+        }
+
+        if (!actualJson.isNull()) {
+            Assertions.assertTrue(
+                    actualJson.isObject() || actualJson.isArray() || actualJson.isValueNode(),
+                    "request should be a valid JSON value");
+        }
+
+        if (actualJson.isArray()) {
+            Assertions.assertTrue(actualJson.size() >= 0, "Array should have valid size");
+        }
+        if (actualJson.isObject()) {
+            Assertions.assertTrue(actualJson.size() >= 0, "Object should have valid field count");
+        }
+
+        // Validate response body
+        Assertions.assertNotNull(response, "Response should not be null");
+        String actualResponseJson = objectMapper.writeValueAsString(response);
+        String expectedResponseBody = ""
+                + "{\n"
+                + "  \"client_id\": \"client_id\",\n"
+                + "  \"use_for_member_access\": true,\n"
+                + "  \"client\": {\n"
+                + "    \"name\": \"name\",\n"
+                + "    \"app_type\": \"app_type\",\n"
+                + "    \"logo_uri\": \"logo_uri\",\n"
+                + "    \"is_first_party\": true,\n"
+                + "    \"grant_types\": [\n"
+                + "      \"grant_types\"\n"
+                + "    ],\n"
+                + "    \"organization_usage\": \"deny\"\n"
+                + "  }\n"
+                + "}";
+        JsonNode actualResponseNode = objectMapper.readTree(actualResponseJson);
+        JsonNode expectedResponseNode = objectMapper.readTree(expectedResponseBody);
+        Assertions.assertTrue(
+                jsonEquals(expectedResponseNode, actualResponseNode),
+                "Response body structure does not match expected");
+        if (actualResponseNode.has("type") || actualResponseNode.has("_type") || actualResponseNode.has("kind")) {
+            String discriminator = null;
+            if (actualResponseNode.has("type"))
+                discriminator = actualResponseNode.get("type").asText();
+            else if (actualResponseNode.has("_type"))
+                discriminator = actualResponseNode.get("_type").asText();
+            else if (actualResponseNode.has("kind"))
+                discriminator = actualResponseNode.get("kind").asText();
+            Assertions.assertNotNull(discriminator, "Union type should have a discriminator field");
+            Assertions.assertFalse(discriminator.isEmpty(), "Union discriminator should not be empty");
+        }
+
+        if (!actualResponseNode.isNull()) {
+            Assertions.assertTrue(
+                    actualResponseNode.isObject() || actualResponseNode.isArray() || actualResponseNode.isValueNode(),
+                    "response should be a valid JSON value");
+        }
+
+        if (actualResponseNode.isArray()) {
+            Assertions.assertTrue(actualResponseNode.size() >= 0, "Array should have valid size");
+        }
+        if (actualResponseNode.isObject()) {
+            Assertions.assertTrue(actualResponseNode.size() >= 0, "Object should have valid field count");
+        }
+    }
+
+    /**
+     * Compares two JsonNodes with numeric equivalence and null safety.
+     * For objects, checks that all fields in 'expected' exist in 'actual' with matching values.
+     * Allows 'actual' to have extra fields (e.g., default values added during serialization).
+     */
+    private boolean jsonEquals(JsonNode expected, JsonNode actual) {
+        if (expected == null && actual == null) return true;
+        if (expected == null || actual == null) return false;
+        if (expected.equals(actual)) return true;
+        if (expected.isNumber() && actual.isNumber())
+            return Math.abs(expected.doubleValue() - actual.doubleValue()) < 1e-10;
+        if (expected.isObject() && actual.isObject()) {
+            java.util.Iterator<java.util.Map.Entry<String, JsonNode>> iter = expected.fields();
+            while (iter.hasNext()) {
+                java.util.Map.Entry<String, JsonNode> entry = iter.next();
+                JsonNode actualValue = actual.get(entry.getKey());
+                if (actualValue == null) {
+                    if (!entry.getValue().isNull()) return false;
+                } else if (!jsonEquals(entry.getValue(), actualValue)) return false;
+            }
+            return true;
+        }
+        if (expected.isArray() && actual.isArray()) {
+            if (expected.size() != actual.size()) return false;
+            for (int i = 0; i < expected.size(); i++) {
+                if (!jsonEquals(expected.get(i), actual.get(i))) return false;
+            }
+            return true;
+        }
+        return false;
+    }
+}
diff --git a/src/test/java/com/auth0/client/mgmt/OrganizationsGroupsRolesWireTest.java b/src/test/java/com/auth0/client/mgmt/OrganizationsGroupsRolesWireTest.java
index 1b770d2e..033b32cd 100644
--- a/src/test/java/com/auth0/client/mgmt/OrganizationsGroupsRolesWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/OrganizationsGroupsRolesWireTest.java
@@ -43,7 +43,7 @@ public void testList() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "{\"roles\":[{\"id\":\"id\",\"name\":\"name\",\"description\":\"description\"}],\"next\":\"next\"}"));
+                                "{\"roles\":[{\"id\":\"id\",\"name\":\"name\",\"description\":\"description\",\"type\":\"tenant\",\"owner_id\":\"owner_id\"}],\"next\":\"next\"}"));
         SyncPagingIterable<Role> response = client.organizations()
                 .groups()
                 .roles()
diff --git a/src/test/java/com/auth0/client/mgmt/OrganizationsMembersRolesWireTest.java b/src/test/java/com/auth0/client/mgmt/OrganizationsMembersRolesWireTest.java
index cd617553..581999a2 100644
--- a/src/test/java/com/auth0/client/mgmt/OrganizationsMembersRolesWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/OrganizationsMembersRolesWireTest.java
@@ -43,7 +43,7 @@ public void testList() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "{\"start\":1.1,\"limit\":1.1,\"total\":1.1,\"roles\":[{\"id\":\"id\",\"name\":\"name\",\"description\":\"description\"}]}"));
+                                "{\"start\":1.1,\"limit\":1.1,\"total\":1.1,\"roles\":[{\"id\":\"id\",\"name\":\"name\",\"description\":\"description\",\"type\":\"tenant\",\"owner_id\":\"owner_id\"}]}"));
         SyncPagingIterable<Role> response = client.organizations()
                 .members()
                 .roles()
diff --git a/src/test/java/com/auth0/client/mgmt/OrganizationsMembersWireTest.java b/src/test/java/com/auth0/client/mgmt/OrganizationsMembersWireTest.java
index eaff5333..7ee531a7 100644
--- a/src/test/java/com/auth0/client/mgmt/OrganizationsMembersWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/OrganizationsMembersWireTest.java
@@ -49,6 +49,7 @@ public void testList() throws Exception {
                 .list(
                         "id",
                         ListOrganizationMembersRequestParameters.builder()
+                                .includeTotals(true)
                                 .from("from")
                                 .take(1)
                                 .fields("fields")
diff --git a/src/test/java/com/auth0/client/mgmt/OrganizationsRolesGroupsWireTest.java b/src/test/java/com/auth0/client/mgmt/OrganizationsRolesGroupsWireTest.java
new file mode 100644
index 00000000..8b628eef
--- /dev/null
+++ b/src/test/java/com/auth0/client/mgmt/OrganizationsRolesGroupsWireTest.java
@@ -0,0 +1,95 @@
+package com.auth0.client.mgmt;
+
+import com.auth0.client.mgmt.core.ObjectMappers;
+import com.auth0.client.mgmt.core.SyncPagingIterable;
+import com.auth0.client.mgmt.organizations.roles.types.ListOrganizationRoleGroupsRequestParameters;
+import com.auth0.client.mgmt.types.RoleGroup;
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import okhttp3.mockwebserver.MockResponse;
+import okhttp3.mockwebserver.MockWebServer;
+import okhttp3.mockwebserver.RecordedRequest;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.Assertions;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+
+public class OrganizationsRolesGroupsWireTest {
+    private MockWebServer server;
+    private ManagementApi client;
+    private ObjectMapper objectMapper = ObjectMappers.JSON_MAPPER;
+
+    @BeforeEach
+    public void setup() throws Exception {
+        server = new MockWebServer();
+        server.start();
+        client = ManagementApi.builder()
+                .url(server.url("/").toString())
+                .token("test-token")
+                .build();
+    }
+
+    @AfterEach
+    public void teardown() throws Exception {
+        server.shutdown();
+    }
+
+    @Test
+    public void testList() throws Exception {
+        server.enqueue(
+                new MockResponse()
+                        .setResponseCode(200)
+                        .setBody(
+                                "{\"groups\":[{\"id\":\"id\",\"name\":\"name\",\"external_id\":\"external_id\",\"connection_id\":\"connection_id\",\"organization_id\":\"organization_id\",\"tenant_name\":\"tenant_name\",\"description\":\"description\",\"created_at\":\"2024-01-15T09:30:00Z\",\"updated_at\":\"2024-01-15T09:30:00Z\"}],\"next\":\"next\"}"));
+        SyncPagingIterable<RoleGroup> response = client.organizations()
+                .roles()
+                .groups()
+                .list(
+                        "organization_id",
+                        "role_id",
+                        ListOrganizationRoleGroupsRequestParameters.builder()
+                                .from("from")
+                                .take(1)
+                                .build());
+        RecordedRequest request = server.takeRequest();
+        Assertions.assertNotNull(request);
+        Assertions.assertEquals("GET", request.getMethod());
+
+        // Validate response body
+        Assertions.assertNotNull(response, "Response should not be null");
+        // Pagination response validated via MockWebServer
+        // The SDK correctly parses the response into a SyncPagingIterable
+    }
+
+    /**
+     * Compares two JsonNodes with numeric equivalence and null safety.
+     * For objects, checks that all fields in 'expected' exist in 'actual' with matching values.
+     * Allows 'actual' to have extra fields (e.g., default values added during serialization).
+     */
+    private boolean jsonEquals(JsonNode expected, JsonNode actual) {
+        if (expected == null && actual == null) return true;
+        if (expected == null || actual == null) return false;
+        if (expected.equals(actual)) return true;
+        if (expected.isNumber() && actual.isNumber())
+            return Math.abs(expected.doubleValue() - actual.doubleValue()) < 1e-10;
+        if (expected.isObject() && actual.isObject()) {
+            java.util.Iterator<java.util.Map.Entry<String, JsonNode>> iter = expected.fields();
+            while (iter.hasNext()) {
+                java.util.Map.Entry<String, JsonNode> entry = iter.next();
+                JsonNode actualValue = actual.get(entry.getKey());
+                if (actualValue == null) {
+                    if (!entry.getValue().isNull()) return false;
+                } else if (!jsonEquals(entry.getValue(), actualValue)) return false;
+            }
+            return true;
+        }
+        if (expected.isArray() && actual.isArray()) {
+            if (expected.size() != actual.size()) return false;
+            for (int i = 0; i < expected.size(); i++) {
+                if (!jsonEquals(expected.get(i), actual.get(i))) return false;
+            }
+            return true;
+        }
+        return false;
+    }
+}
diff --git a/src/test/java/com/auth0/client/mgmt/OrganizationsWireTest.java b/src/test/java/com/auth0/client/mgmt/OrganizationsWireTest.java
index 5507d18f..b1a34286 100644
--- a/src/test/java/com/auth0/client/mgmt/OrganizationsWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/OrganizationsWireTest.java
@@ -46,12 +46,14 @@ public void testList() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "{\"next\":\"next\",\"organizations\":[{\"id\":\"id\",\"name\":\"name\",\"display_name\":\"display_name\",\"token_quota\":{\"client_credentials\":{}},\"third_party_client_access\":\"block\"}]}"));
+                                "{\"next\":\"next\",\"organizations\":[{\"id\":\"id\",\"name\":\"name\",\"display_name\":\"display_name\",\"token_quota\":{\"client_credentials\":{}},\"third_party_client_access\":\"block\",\"is_app_entitlement_active\":true}]}"));
         SyncPagingIterable<Organization> response = client.organizations()
                 .list(ListOrganizationsRequestParameters.builder()
+                        .includeTotals(true)
                         .from("from")
                         .take(1)
                         .sort("sort")
+                        .includeClientAssociationFor("include_client_association_for")
                         .build());
         RecordedRequest request = server.takeRequest();
         Assertions.assertNotNull(request);
@@ -69,7 +71,7 @@ public void testCreate() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "{\"id\":\"id\",\"name\":\"name\",\"display_name\":\"display_name\",\"branding\":{\"logo_url\":\"logo_url\",\"colors\":{\"primary\":\"primary\",\"page_background\":\"page_background\"}},\"metadata\":{\"key\":\"value\"},\"token_quota\":{\"client_credentials\":{\"enforce\":true,\"per_day\":1,\"per_hour\":1}},\"third_party_client_access\":\"block\",\"enabled_connections\":[{\"connection_id\":\"connection_id\",\"assign_membership_on_login\":true,\"show_as_button\":true,\"is_signup_enabled\":true}]}"));
+                                "{\"id\":\"id\",\"name\":\"name\",\"display_name\":\"display_name\",\"branding\":{\"logo_url\":\"logo_url\",\"colors\":{\"primary\":\"primary\",\"page_background\":\"page_background\"}},\"metadata\":{\"key\":\"value\"},\"token_quota\":{\"client_credentials\":{\"enforce\":true,\"per_day\":1,\"per_hour\":1}},\"third_party_client_access\":\"block\",\"is_app_entitlement_active\":true,\"client\":{\"use_for_member_access\":true},\"enabled_connections\":[{\"connection_id\":\"connection_id\",\"assign_membership_on_login\":true,\"show_as_button\":true,\"is_signup_enabled\":true}]}"));
         CreateOrganizationResponseContent response = client.organizations()
                 .create(CreateOrganizationRequestContent.builder().name("name").build());
         RecordedRequest request = server.takeRequest();
@@ -131,6 +133,10 @@ else if (actualJson.has("kind"))
                 + "    }\n"
                 + "  },\n"
                 + "  \"third_party_client_access\": \"block\",\n"
+                + "  \"is_app_entitlement_active\": true,\n"
+                + "  \"client\": {\n"
+                + "    \"use_for_member_access\": true\n"
+                + "  },\n"
                 + "  \"enabled_connections\": [\n"
                 + "    {\n"
                 + "      \"connection_id\": \"connection_id\",\n"
@@ -177,7 +183,7 @@ public void testGetByName() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "{\"id\":\"id\",\"name\":\"name\",\"display_name\":\"display_name\",\"branding\":{\"logo_url\":\"logo_url\",\"colors\":{\"primary\":\"primary\",\"page_background\":\"page_background\"}},\"metadata\":{\"key\":\"value\"},\"token_quota\":{\"client_credentials\":{\"enforce\":true,\"per_day\":1,\"per_hour\":1}},\"third_party_client_access\":\"block\"}"));
+                                "{\"id\":\"id\",\"name\":\"name\",\"display_name\":\"display_name\",\"branding\":{\"logo_url\":\"logo_url\",\"colors\":{\"primary\":\"primary\",\"page_background\":\"page_background\"}},\"metadata\":{\"key\":\"value\"},\"token_quota\":{\"client_credentials\":{\"enforce\":true,\"per_day\":1,\"per_hour\":1}},\"third_party_client_access\":\"block\",\"is_app_entitlement_active\":true,\"client\":{\"use_for_member_access\":true}}"));
         GetOrganizationByNameResponseContent response = client.organizations().getByName("name");
         RecordedRequest request = server.takeRequest();
         Assertions.assertNotNull(request);
@@ -208,7 +214,11 @@ public void testGetByName() throws Exception {
                 + "      \"per_hour\": 1\n"
                 + "    }\n"
                 + "  },\n"
-                + "  \"third_party_client_access\": \"block\"\n"
+                + "  \"third_party_client_access\": \"block\",\n"
+                + "  \"is_app_entitlement_active\": true,\n"
+                + "  \"client\": {\n"
+                + "    \"use_for_member_access\": true\n"
+                + "  }\n"
                 + "}";
         JsonNode actualResponseNode = objectMapper.readTree(actualResponseJson);
         JsonNode expectedResponseNode = objectMapper.readTree(expectedResponseBody);
@@ -247,7 +257,7 @@ public void testGet() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "{\"id\":\"id\",\"name\":\"name\",\"display_name\":\"display_name\",\"branding\":{\"logo_url\":\"logo_url\",\"colors\":{\"primary\":\"primary\",\"page_background\":\"page_background\"}},\"metadata\":{\"key\":\"value\"},\"token_quota\":{\"client_credentials\":{\"enforce\":true,\"per_day\":1,\"per_hour\":1}},\"third_party_client_access\":\"block\"}"));
+                                "{\"id\":\"id\",\"name\":\"name\",\"display_name\":\"display_name\",\"branding\":{\"logo_url\":\"logo_url\",\"colors\":{\"primary\":\"primary\",\"page_background\":\"page_background\"}},\"metadata\":{\"key\":\"value\"},\"token_quota\":{\"client_credentials\":{\"enforce\":true,\"per_day\":1,\"per_hour\":1}},\"third_party_client_access\":\"block\",\"is_app_entitlement_active\":true,\"client\":{\"use_for_member_access\":true}}"));
         GetOrganizationResponseContent response = client.organizations().get("id");
         RecordedRequest request = server.takeRequest();
         Assertions.assertNotNull(request);
@@ -278,7 +288,11 @@ public void testGet() throws Exception {
                 + "      \"per_hour\": 1\n"
                 + "    }\n"
                 + "  },\n"
-                + "  \"third_party_client_access\": \"block\"\n"
+                + "  \"third_party_client_access\": \"block\",\n"
+                + "  \"is_app_entitlement_active\": true,\n"
+                + "  \"client\": {\n"
+                + "    \"use_for_member_access\": true\n"
+                + "  }\n"
                 + "}";
         JsonNode actualResponseNode = objectMapper.readTree(actualResponseJson);
         JsonNode expectedResponseNode = objectMapper.readTree(expectedResponseBody);
@@ -326,7 +340,7 @@ public void testUpdate() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "{\"id\":\"id\",\"name\":\"name\",\"display_name\":\"display_name\",\"branding\":{\"logo_url\":\"logo_url\",\"colors\":{\"primary\":\"primary\",\"page_background\":\"page_background\"}},\"metadata\":{\"key\":\"value\"},\"token_quota\":{\"client_credentials\":{\"enforce\":true,\"per_day\":1,\"per_hour\":1}},\"third_party_client_access\":\"block\"}"));
+                                "{\"id\":\"id\",\"name\":\"name\",\"display_name\":\"display_name\",\"branding\":{\"logo_url\":\"logo_url\",\"colors\":{\"primary\":\"primary\",\"page_background\":\"page_background\"}},\"metadata\":{\"key\":\"value\"},\"token_quota\":{\"client_credentials\":{\"enforce\":true,\"per_day\":1,\"per_hour\":1}},\"third_party_client_access\":\"block\",\"is_app_entitlement_active\":true,\"client\":{\"use_for_member_access\":true}}"));
         UpdateOrganizationResponseContent response = client.organizations()
                 .update("id", UpdateOrganizationRequestContent.builder().build());
         RecordedRequest request = server.takeRequest();
@@ -387,7 +401,11 @@ else if (actualJson.has("kind"))
                 + "      \"per_hour\": 1\n"
                 + "    }\n"
                 + "  },\n"
-                + "  \"third_party_client_access\": \"block\"\n"
+                + "  \"third_party_client_access\": \"block\",\n"
+                + "  \"is_app_entitlement_active\": true,\n"
+                + "  \"client\": {\n"
+                + "    \"use_for_member_access\": true\n"
+                + "  }\n"
                 + "}";
         JsonNode actualResponseNode = objectMapper.readTree(actualResponseJson);
         JsonNode expectedResponseNode = objectMapper.readTree(expectedResponseBody);
diff --git a/src/test/java/com/auth0/client/mgmt/RolesUsersWireTest.java b/src/test/java/com/auth0/client/mgmt/RolesUsersWireTest.java
index 4f628283..eaf6b950 100644
--- a/src/test/java/com/auth0/client/mgmt/RolesUsersWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/RolesUsersWireTest.java
@@ -48,6 +48,7 @@ public void testList() throws Exception {
                 .list(
                         "id",
                         ListRoleUsersRequestParameters.builder()
+                                .includeTotals(true)
                                 .from("from")
                                 .take(1)
                                 .build());
diff --git a/src/test/java/com/auth0/client/mgmt/RolesWireTest.java b/src/test/java/com/auth0/client/mgmt/RolesWireTest.java
index aadfadda..d5ab99b0 100644
--- a/src/test/java/com/auth0/client/mgmt/RolesWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/RolesWireTest.java
@@ -7,6 +7,7 @@
 import com.auth0.client.mgmt.types.GetRoleResponseContent;
 import com.auth0.client.mgmt.types.ListRolesRequestParameters;
 import com.auth0.client.mgmt.types.Role;
+import com.auth0.client.mgmt.types.RoleTypeEnum;
 import com.auth0.client.mgmt.types.UpdateRoleRequestContent;
 import com.auth0.client.mgmt.types.UpdateRoleResponseContent;
 import com.fasterxml.jackson.databind.JsonNode;
@@ -45,13 +46,15 @@ public void testList() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "{\"start\":1.1,\"limit\":1.1,\"total\":1.1,\"roles\":[{\"id\":\"id\",\"name\":\"name\",\"description\":\"description\"}]}"));
+                                "{\"start\":1.1,\"limit\":1.1,\"total\":1.1,\"roles\":[{\"id\":\"id\",\"name\":\"name\",\"description\":\"description\",\"type\":\"tenant\",\"owner_id\":\"owner_id\"}]}"));
         SyncPagingIterable<Role> response = client.roles()
                 .list(ListRolesRequestParameters.builder()
                         .perPage(1)
                         .page(1)
                         .includeTotals(true)
                         .nameFilter("name_filter")
+                        .type(RoleTypeEnum.TENANT)
+                        .ownerId("owner_id")
                         .build());
         RecordedRequest request = server.takeRequest();
         Assertions.assertNotNull(request);
@@ -65,9 +68,11 @@ public void testList() throws Exception {
 
     @Test
     public void testCreate() throws Exception {
-        server.enqueue(new MockResponse()
-                .setResponseCode(200)
-                .setBody("{\"id\":\"id\",\"name\":\"name\",\"description\":\"description\"}"));
+        server.enqueue(
+                new MockResponse()
+                        .setResponseCode(200)
+                        .setBody(
+                                "{\"id\":\"id\",\"name\":\"name\",\"description\":\"description\",\"type\":\"tenant\",\"owner_id\":\"owner_id\"}"));
         CreateRoleResponseContent response = client.roles()
                 .create(CreateRoleRequestContent.builder().name("name").build());
         RecordedRequest request = server.takeRequest();
@@ -110,7 +115,9 @@ else if (actualJson.has("kind"))
                 + "{\n"
                 + "  \"id\": \"id\",\n"
                 + "  \"name\": \"name\",\n"
-                + "  \"description\": \"description\"\n"
+                + "  \"description\": \"description\",\n"
+                + "  \"type\": \"tenant\",\n"
+                + "  \"owner_id\": \"owner_id\"\n"
                 + "}";
         JsonNode actualResponseNode = objectMapper.readTree(actualResponseJson);
         JsonNode expectedResponseNode = objectMapper.readTree(expectedResponseBody);
@@ -145,9 +152,11 @@ else if (actualResponseNode.has("kind"))
 
     @Test
     public void testGet() throws Exception {
-        server.enqueue(new MockResponse()
-                .setResponseCode(200)
-                .setBody("{\"id\":\"id\",\"name\":\"name\",\"description\":\"description\"}"));
+        server.enqueue(
+                new MockResponse()
+                        .setResponseCode(200)
+                        .setBody(
+                                "{\"id\":\"id\",\"name\":\"name\",\"description\":\"description\",\"type\":\"tenant\",\"owner_id\":\"owner_id\"}"));
         GetRoleResponseContent response = client.roles().get("id");
         RecordedRequest request = server.takeRequest();
         Assertions.assertNotNull(request);
@@ -160,7 +169,9 @@ public void testGet() throws Exception {
                 + "{\n"
                 + "  \"id\": \"id\",\n"
                 + "  \"name\": \"name\",\n"
-                + "  \"description\": \"description\"\n"
+                + "  \"description\": \"description\",\n"
+                + "  \"type\": \"tenant\",\n"
+                + "  \"owner_id\": \"owner_id\"\n"
                 + "}";
         JsonNode actualResponseNode = objectMapper.readTree(actualResponseJson);
         JsonNode expectedResponseNode = objectMapper.readTree(expectedResponseBody);
@@ -204,9 +215,11 @@ public void testDelete() throws Exception {
 
     @Test
     public void testUpdate() throws Exception {
-        server.enqueue(new MockResponse()
-                .setResponseCode(200)
-                .setBody("{\"id\":\"id\",\"name\":\"name\",\"description\":\"description\"}"));
+        server.enqueue(
+                new MockResponse()
+                        .setResponseCode(200)
+                        .setBody(
+                                "{\"id\":\"id\",\"name\":\"name\",\"description\":\"description\",\"type\":\"tenant\",\"owner_id\":\"owner_id\"}"));
         UpdateRoleResponseContent response =
                 client.roles().update("id", UpdateRoleRequestContent.builder().build());
         RecordedRequest request = server.takeRequest();
@@ -249,7 +262,9 @@ else if (actualJson.has("kind"))
                 + "{\n"
                 + "  \"id\": \"id\",\n"
                 + "  \"name\": \"name\",\n"
-                + "  \"description\": \"description\"\n"
+                + "  \"description\": \"description\",\n"
+                + "  \"type\": \"tenant\",\n"
+                + "  \"owner_id\": \"owner_id\"\n"
                 + "}";
         JsonNode actualResponseNode = objectMapper.readTree(actualResponseJson);
         JsonNode expectedResponseNode = objectMapper.readTree(expectedResponseBody);
diff --git a/src/test/java/com/auth0/client/mgmt/UsersEffectivePermissionsSourcesRolesWireTest.java b/src/test/java/com/auth0/client/mgmt/UsersEffectivePermissionsSourcesRolesWireTest.java
index 7fe639a9..2e5515c5 100644
--- a/src/test/java/com/auth0/client/mgmt/UsersEffectivePermissionsSourcesRolesWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/UsersEffectivePermissionsSourcesRolesWireTest.java
@@ -40,7 +40,7 @@ public void testList() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "{\"roles\":[{\"id\":\"id\",\"name\":\"name\",\"description\":\"description\",\"sources\":[\"direct\"]}],\"next\":\"next\"}"));
+                                "{\"roles\":[{\"id\":\"id\",\"name\":\"name\",\"description\":\"description\",\"type\":\"tenant\",\"owner_id\":\"owner_id\",\"sources\":[\"direct\"]}],\"next\":\"next\"}"));
         SyncPagingIterable<UserEffectivePermissionRoleSourceResponseContent> response = client.users()
                 .effectivePermissions()
                 .sources()
diff --git a/src/test/java/com/auth0/client/mgmt/UsersGroupsWireTest.java b/src/test/java/com/auth0/client/mgmt/UsersGroupsWireTest.java
index 13198b1f..e0862621 100644
--- a/src/test/java/com/auth0/client/mgmt/UsersGroupsWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/UsersGroupsWireTest.java
@@ -48,6 +48,7 @@ public void testGet() throws Exception {
                         GetUserGroupsRequestParameters.builder()
                                 .fields("fields")
                                 .includeFields(true)
+                                .includeTotals(true)
                                 .from("from")
                                 .take(1)
                                 .build());
diff --git a/src/test/java/com/auth0/client/mgmt/UsersOrganizationsWireTest.java b/src/test/java/com/auth0/client/mgmt/UsersOrganizationsWireTest.java
index 8c133e1d..d29bb98a 100644
--- a/src/test/java/com/auth0/client/mgmt/UsersOrganizationsWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/UsersOrganizationsWireTest.java
@@ -40,7 +40,7 @@ public void testList() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "{\"start\":1.1,\"limit\":1.1,\"total\":1.1,\"organizations\":[{\"id\":\"id\",\"name\":\"name\",\"display_name\":\"display_name\",\"token_quota\":{\"client_credentials\":{}},\"third_party_client_access\":\"block\"}]}"));
+                                "{\"start\":1.1,\"limit\":1.1,\"total\":1.1,\"organizations\":[{\"id\":\"id\",\"name\":\"name\",\"display_name\":\"display_name\",\"token_quota\":{\"client_credentials\":{}},\"third_party_client_access\":\"block\",\"is_app_entitlement_active\":true}]}"));
         SyncPagingIterable<Organization> response = client.users()
                 .organizations()
                 .list(
diff --git a/src/test/java/com/auth0/client/mgmt/UsersRefreshTokenWireTest.java b/src/test/java/com/auth0/client/mgmt/UsersRefreshTokenWireTest.java
index 79ce31f9..19b88055 100644
--- a/src/test/java/com/auth0/client/mgmt/UsersRefreshTokenWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/UsersRefreshTokenWireTest.java
@@ -46,6 +46,7 @@ public void testList() throws Exception {
                 .list(
                         "user_id",
                         ListRefreshTokensRequestParameters.builder()
+                                .includeTotals(true)
                                 .from("from")
                                 .take(1)
                                 .build());
diff --git a/src/test/java/com/auth0/client/mgmt/UsersRolesWireTest.java b/src/test/java/com/auth0/client/mgmt/UsersRolesWireTest.java
index 2470c1bc..5ab3fcee 100644
--- a/src/test/java/com/auth0/client/mgmt/UsersRolesWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/UsersRolesWireTest.java
@@ -43,7 +43,7 @@ public void testList() throws Exception {
                 new MockResponse()
                         .setResponseCode(200)
                         .setBody(
-                                "{\"start\":1.1,\"limit\":1.1,\"total\":1.1,\"roles\":[{\"id\":\"id\",\"name\":\"name\",\"description\":\"description\"}]}"));
+                                "{\"start\":1.1,\"limit\":1.1,\"total\":1.1,\"roles\":[{\"id\":\"id\",\"name\":\"name\",\"description\":\"description\",\"type\":\"tenant\",\"owner_id\":\"owner_id\"}]}"));
         SyncPagingIterable<Role> response = client.users()
                 .roles()
                 .list(
diff --git a/src/test/java/com/auth0/client/mgmt/UsersSessionsWireTest.java b/src/test/java/com/auth0/client/mgmt/UsersSessionsWireTest.java
index 90ed1bc7..5c0f8a59 100644
--- a/src/test/java/com/auth0/client/mgmt/UsersSessionsWireTest.java
+++ b/src/test/java/com/auth0/client/mgmt/UsersSessionsWireTest.java
@@ -46,6 +46,7 @@ public void testList() throws Exception {
                 .list(
                         "user_id",
                         ListUserSessionsRequestParameters.builder()
+                                .includeTotals(true)
                                 .from("from")
                                 .take(1)
                                 .build());