export declare const DynamicGroupQueryResourceType: { /** * Default value (not valid) */ readonly ResourceTypeUnspecified: "RESOURCE_TYPE_UNSPECIFIED"; /** * For queries on User */ readonly User: "USER"; }; /** * Resource type for the Dynamic Group Query */ export type DynamicGroupQueryResourceType = (typeof DynamicGroupQueryResourceType)[keyof typeof DynamicGroupQueryResourceType]; export declare const InboundSsoAssignmentSsoMode: { /** * Not allowed. */ readonly SsoModeUnspecified: "SSO_MODE_UNSPECIFIED"; /** * Disable SSO for the targeted users. */ readonly SsoOff: "SSO_OFF"; /** * Use an external SAML Identity Provider for SSO for the targeted users. */ readonly SamlSso: "SAML_SSO"; /** * Use the domain-wide SAML Identity Provider for the targeted users if one is configured; otherwise, this is equivalent to `SSO_OFF`. Note that this will also be equivalent to `SSO_OFF` if/when support for domain-wide SAML is removed. Google may disallow this mode at that point and existing assignments with this mode may be automatically changed to `SSO_OFF`. */ readonly DomainWideSamlIfEnabled: "DOMAIN_WIDE_SAML_IF_ENABLED"; }; /** * Inbound SSO behavior. */ export type InboundSsoAssignmentSsoMode = (typeof InboundSsoAssignmentSsoMode)[keyof typeof InboundSsoAssignmentSsoMode]; export declare const SignInBehaviorRedirectCondition: { /** * Default and means "always" */ readonly RedirectConditionUnspecified: "REDIRECT_CONDITION_UNSPECIFIED"; /** * Sign-in flows where the user is prompted for their identity will not redirect to the IdP (so the user will most likely be prompted by Google for a password), but special flows like IdP-initiated SAML and sign-in following automatic redirection to the IdP by domain-specific service URLs will accept the IdP's assertion of the user's identity. */ readonly Never: "NEVER"; }; /** * When to redirect sign-ins to the IdP. */ export type SignInBehaviorRedirectCondition = (typeof SignInBehaviorRedirectCondition)[keyof typeof SignInBehaviorRedirectCondition];