/**
 * SAML SSO — enterprise Identity Provider configuration per organization.
 *
 *   GET    /saml                          — provider for org (null if unconfigured)
 *   POST   /saml                          — create provider
 *   PATCH  /saml                          — update provider
 *   POST   /saml/status                   — enable / disable
 *   DELETE /saml                          — delete provider + accounts
 *   GET    /saml/metadata                 — SP metadata XML (for IdP wiring)
 *   GET    /saml/logs                     — authentication logs
 *   POST   /saml/test                     — validate cert + reach SSO URL
 *   GET    /saml/templates                — IdP setup templates (Okta/Azure/...)
 *   GET    /saml/name-id-formats          — enum options + URIs
 *   GET    /saml/signature-algorithms     — enum options + URIs
 *
 * Wire shape sourced from `@sylphx/contract` (ADR-084). Paths + methods
 * come from `samlEndpoints`; types come from the matching schemas.
 * Hand-written types are forbidden here.
 *
 * Admin-only. Certificate is PEM — `create()` / `update()` accept it as-is;
 * the server validates the chain and stores the fingerprint. The raw IdP
 * metadata XML returned by `metadata()` is feed-ready for the IdP's
 * "Add Service Provider" flow — no post-processing required.
 */
import type { CreateSAMLProviderInput, CreateSAMLProviderResult, DeleteSAMLProviderResult, GetSAMLLogsResult, GetSAMLMetadataResult, GetSAMLProviderResult, ListSAMLIdPTemplatesResult, ListSAMLNameIdFormatsResult, ListSAMLSignatureAlgorithmsResult, SAMLAttributeMapping, SAMLAuthLog, SAMLIdPTemplate, SAMLNameIdFormat, SAMLNameIdFormatOption, SAMLProvider, SAMLProviderStatus, SAMLProviderType, SAMLSignatureAlgorithm, SAMLSignatureAlgorithmOption, SetSAMLProviderStatusResult, TestSAMLConfigInput, TestSAMLConfigResult, UpdateSAMLProviderInput, UpdateSAMLProviderResult } from '@sylphx/contract';
import type { Client } from './client.js';
export type { CreateSAMLProviderInput, CreateSAMLProviderResult, GetSAMLMetadataResult as MetadataResult, SAMLAttributeMapping, SAMLAuthLog as AuthLog, SAMLIdPTemplate as IdPTemplate, SAMLNameIdFormat, SAMLNameIdFormatOption as NameIdFormatOption, SAMLProvider, SAMLProviderStatus, SAMLProviderType, SAMLSignatureAlgorithm, SAMLSignatureAlgorithmOption as SignatureAlgorithmOption, TestSAMLConfigInput as TestConfigInput, TestSAMLConfigResult as TestConfigResult, UpdateSAMLProviderInput, };
/**
 * `Promise`-typed CRUD wrappers. Each routes through the contract endpoint
 * descriptor so the path / method live in `@sylphx/contract` only.
 */
export declare const get: (client: Client, organizationId: string) => Promise<GetSAMLProviderResult>;
export declare const create: (client: Client, input: CreateSAMLProviderInput) => Promise<CreateSAMLProviderResult>;
export declare const update: (client: Client, input: UpdateSAMLProviderInput) => Promise<UpdateSAMLProviderResult>;
export declare const setStatus: (client: Client, providerId: string, enabled: boolean) => Promise<SetSAMLProviderStatusResult>;
declare const _delete: (client: Client, providerId: string) => Promise<DeleteSAMLProviderResult>;
export { _delete as delete };
export declare const metadata: (client: Client, organizationId: string) => Promise<GetSAMLMetadataResult>;
export declare const logs: (client: Client, providerId: string, limit?: number) => Promise<GetSAMLLogsResult>;
export declare const testConfig: (client: Client, input: TestSAMLConfigInput) => Promise<TestSAMLConfigResult>;
export declare const templates: (client: Client) => Promise<ListSAMLIdPTemplatesResult>;
export declare const nameIdFormats: (client: Client) => Promise<ListSAMLNameIdFormatsResult>;
export declare const signatureAlgorithms: (client: Client) => Promise<ListSAMLSignatureAlgorithmsResult>;
//# sourceMappingURL=saml.d.ts.map