feat: add Organization Templates, B2B integration config, network ACL signatures & key deletion

[fern-api]

Summary

It adds support for the following:

• New Organization Templates client (top-level + per-organization)
• B2B Integration Configuration on clients
• Network ACLs — HTTP message signature matching + network ACL key deletion
• Connection Profiles — SCIM provisioning
• Connections — Pushed Authorization Requests, SAML discovery/OIDC metadata, SAML cross-app access
• Smaller additions to Forms, Tenant Settings, and Actions
• New UnprocessableEntityError (HTTP 422)
• Two breaking changes (see below)

---

Organization Templates (New)

Introduces a new top-level organizationTemplates() client and a per-organization organizations().organizationTemplate() sub-client.

Operation	Method
List templates (paged)	organizationTemplates().list(...)
Create a template	organizationTemplates().create(CreateOrganizationTemplateRequestContent)
Retrieve a template	organizationTemplates().get(id)
Update a template	organizationTemplates().update(id, UpdateOrganizationTemplateRequestContent)
List organizations for a template (checkpoint pagination, sorted by id)	organizationTemplates().listOrganizations(id, ...)
Retrieve a template in an organization context	organizations().organizationTemplate().get(id)
Assign a template to an organization	organizations().organizationTemplate().assignOrganizationTemplate(id, templateId)
Unassign a template	organizations().organizationTemplate().unassignOrganizationTemplate(id, templateId)

---

Clients — B2B Integration Configuration

Adds b2b_integration_configuration to the client create, update, get, and rotate-secret payloads.

Field	Added to
b2bIntegrationConfiguration (B2BIntegrationConfiguration)	Client, CreateClientRequestContent / ResponseContent, UpdateClientRequestContent / ResponseContent,
GetClientResponseContent, RotateClientSecretResponseContent

---

Network ACLs

Operation	Method
Delete a network ACL key	keys().networkAcls().delete(id)

Adds an HTTP message signature match to tenant network ACLs (a new HTTP message signature field on the network ACL match).

---

Connection Profiles — SCIM Provisioning

Adds a provisioning field to connection profiles, with strategy overrides and templates.

---

Connections

Area	Fields added
OIDC & Okta connection options	enable_pushed_authorization_requests, pushed_authorization_request_endpoint
OIDC metadata	require_pushed_authorization_requests
SAML connection options	discovery_url, oidc_metadata
SAML create / update / response content	cross_app_access_resource_app

---

Miscellaneous

Area	Change
Forms	server_key added to FormWidgetGMapsAddressConfig
Tenant Settings	local_resource_discovery flag added to TenantSettingsFlags
Actions	New post-credential-validation trigger type
Errors	New UnprocessableEntityError; HTTP 422 responses now mapped to it

---

🚨 Breaking Changes

ClientAppTypeEnum.B2B_INTEGRATION removed

The app_type value b2b_integration was released in beta by mistake and is being removed. B2B integration is now modeled through the new b2b_integration_configuration field on clients.

EventStreamCloudEventContextTenant field renamed

Corrects the field to match the API contract: JSON property tenant_id → id, and the getTenantId() accessor / builder setter are replaced by getId().

---

Testing

• This change adds test coverage
• This change has been tested on the latest version of the platform/language or why not

---

Checklist

• I have read the Auth0 general contribution guidelines
• I have read the Auth0 Code of Conduct
• All existing and new tests complete without errors

[developerkunal]

LGTM