feat: add Organization Templates, Connection Profile SCIM provisioning, and Network ACL HTTP message signatures

[fern-api]

Changes

SDK regeneration from the Auth0 OpenAPI spec via Fern. Adds a new Organization Templates management client and an organization-level template assignment sub-client, SCIM provisioning on Connection Profiles, HTTP message signature configuration on Network ACL rule matches, a B2B integration configuration on clients (replacing the b2b_integration app type), pushed authorization request (PAR) and SAML discovery settings on connections, and a set of new enum members across connections, action triggers, and screens.

🆕 New endpoints / types:

• Organization Templates - new top-level organization_templates client with list/create/get/update/delete on organization-templates, backed by OrganizationTemplate, ListOrganizationTemplatesPaginatedResponseContent, and the create:organization_templates/read:organization_templates/update:organization_templates scopes
• Organization template assignment - new organizations.organization_template sub-client with get/assign_organization_template/unassign_organization_template on organizations/{id}/organization-templates
• Deletion behavior enums - ConnectionDeletionBehaviorEnum and OrganizationDeletionBehaviorEnum (allow, allow_if_empty), used by the organization template configuration

✏️ Modified endpoints (new properties):

• Connection Profile SCIM provisioning - provisioning on Connection Profile create/update/response, backed by ConnectionProfileProvisioning, ConnectionProfileProvisioningScim, the SCIM token types, and ConnectionProfileProvisioningScimTokenScopeEnum (get:users, post:users, patch:users, delete:users, put:users)
• Network ACL HTTP message signature - http_message_signature on NetworkACLMatch, backed by NetworkAclHttpMessageSignature and NetworkAclHttpMessageSignatureKey
• B2B integration configuration - b2b_integration_configuration on client create/update/response, backed by B2BIntegrationConfiguration (sso_profiles, integration_type) and B2BIntegrationConfigurationIntegrationTypeEnum
• Pushed Authorization Requests on connections - enable_pushed_authorization_requests, pushed_authorization_request_endpoint, and require_pushed_authorization_requests on ConnectionOptionsCommonOidc, ConnectionOptionsOidc, ConnectionOptionsOkta, ConnectionPropertiesOptions, and UpdateConnectionOptions
• SAML discovery and OIDC metadata - discovery_url and oidc_metadata on ConnectionOptionsSaml
• Cross App Access Resource App on SAML connections - cross_app_access_resource_app on SAML connection create/update/response, backed by ConnectionCrossAppAccessResourceApp
• MCP connection strategies - 17 MCP provider members (asana-mcp, atlassian-mcp, cloudflare-mcp, docusign-mcp, figma-mcp, gitlab-mcp, gusto-mcp, heroku-mcp, hubspot-mcp, intercom-mcp, linear-mcp, pagerduty-mcp, sentry-mcp, slack-mcp, supabase-mcp, vercel-mcp, xero-mcp) added to ConnectionStrategyEnum and ConnectionIdentityProviderEnum
• Post credential validation trigger - post-credential-validation member on ActionTriggerTypeEnum
• Consent tenant scopes screen - consent-tenant-scopes member on ScreenGroupNameEnum
• Local resource discovery - local_resource_discovery on TenantSettingsFlags

⚠️ Breaking Changes:

• ClientAppTypeEnum drops b2b_integration - the b2b_integration app type is removed. Migration: configure B2B integrations through the new b2b_integration_configuration field on the client instead.
• EventStreamCloudEventContextTenant.tenant_id renamed to id - the getter/setter change from tenant_id to id. Migration: update any references from tenant_id to id.

References

N/A

Testing

Existing wire tests were regenerated to match the updated client. The live-tenant integration test passes against a dev tenant, and the new types load correctly.

• This change adds unit test coverage
• This change has been tested on the latest version of Ruby

Checklist

• I have read the Auth0 general contribution guidelines
• I have read the Auth0 Code of Conduct
• All existing and new tests complete without errors
• Rubocop passes on all added/modified files
• All active GitHub checks have passed

[kishore7snehil]

LGTM!