/**
 * SmartyMeet Dev03 API REST
 * No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
 *
 * The version of the OpenAPI document: 1.0.1
 * Contact: developer@smartymeet.com
 *
 * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
 * https://openapi-generator.tech
 * Do not edit the class manually.
 */
/**
 * The policy a customer's OWNER may set on top of an existing SSO connection (PATCH /v1/tenants/{tenantId}/sso). Deliberately a subset: these three fields reach nothing outside the tenant, whereas `domains` claims a name in a GLOBAL registry that phase 1 verifies by hand, and `entraTenantId`/`idpName` identify the connection itself - those stay on the sysowner-only POST. Every field is optional; whatever is omitted keeps its stored value.
 * @export
 * @interface TenantSsoPolicySchema
 */
export interface TenantSsoPolicySchema {
    /**
     * When true, password login is refused for this tenant's users. Owner and sysowner are always exempt (a break-glass account: an outage at the customer's IdP must not lock them out of the product, or out of this door), as is any user carrying meta.ssoExempt. Switching it from false to true also signs every account out - the enforcement trigger never sees a token refresh, and a refresh token lives 30 days.
     * @type {boolean}
     * @memberof TenantSsoPolicySchema
     */
    required?: boolean;
    /**
     * When true, a JIT user is activated immediately with defaultRole instead of landing in a pending state. Off by default: domain-gated JIT makes the customer's whole workforce eligible, so this hands an operational role to anyone who can authenticate at their IdP.
     * @type {boolean}
     * @memberof TenantSsoPolicySchema
     */
    autoApprove?: boolean;
    /**
     * Role granted when a pending JIT user is APPROVED - never granted by the act of signing in.
     * @type {string}
     * @memberof TenantSsoPolicySchema
     */
    defaultRole?: string;
}
/**
 * Check if a given object implements the TenantSsoPolicySchema interface.
 */
export declare function instanceOfTenantSsoPolicySchema(value: object): value is TenantSsoPolicySchema;
export declare function TenantSsoPolicySchemaFromJSON(json: any): TenantSsoPolicySchema;
export declare function TenantSsoPolicySchemaFromJSONTyped(json: any, ignoreDiscriminator: boolean): TenantSsoPolicySchema;
export declare function TenantSsoPolicySchemaToJSON(json: any): TenantSsoPolicySchema;
export declare function TenantSsoPolicySchemaToJSONTyped(value?: TenantSsoPolicySchema | null, ignoreDiscriminator?: boolean): any;
//# sourceMappingURL=TenantSsoPolicySchema.d.ts.map