We will support more authentication protocols later.

This is actually type 11 in the DB.

trial for bw.

the account is locked.

returned from saml/sso/finish_login.

the account on this device is locked.

device needs to be approved to use for this user.

the device is locked for all accounts.

something is wrong, should never be in this state.

enterprise account cannot log in.

the client has been logged out.

a login token is not valid forever, if you get this, start over.

account is in a different region, device should know that already.

2fa needs satisfying.

for a cloud sso user that doesn't yet exist.

the device is 2fa's and now we need the auth hash.

device needs approval with a dedk.

no username is supplied and we need one to continue.

client version is disallowed.

to all user's messageSessionUid except one specific messageSessionUid (origin).

to all devices.

to one specific messageSessionUid.

to all messageSessionUid for enterpriseId not equal current messageSessionUid.

KA or Chat connects to or disconnects from PS.

to one specific messageSessionUid (somehow different from DNA).

not supported.

to 2FA.

to all user's messageSessionUid except one specific messageSessionUid (origin).

Australia.

Canada.

Europe.

Japan.

Our region numbers start at 1.

North America.

US Government.

can only accept the enterprise invite.

can only change password.

user has tried to log into the console but no enterprise exists.

for webapp.

can do everything.

can only get sku's for purchase.

This is for a session token where the account is expired, but can still log in.

must first agree to share their account.

from BI (Token object is created manually in Chat Server after decrypting BI's json token).

Removes the setting's value, essentially setting it to null.

Retrieve the value of this setting.

Sets it to the default setting.

Set the value of this setting.

The values should correspond to the entries in the DB, so we don't use element 0.

Google authenticator etc.

protobuf enum has to start with 0.

Enum value maps for AccountType.

Enum value maps for AccountType.

Enum value maps for AlternateAuthenticationType.

Enum value maps for AlternateAuthenticationType.

Enum value maps for ApplicationShareType.

Enum value maps for ApplicationShareType.

Enum value maps for AuthProtocolType.

Enum value maps for AuthProtocolType.

Enum value maps for BackupKeyType.

Enum value maps for BackupKeyType.

Enum value maps for DataType.

Enum value maps for DataType.

Enum value maps for DeviceStatus.

Enum value maps for DeviceStatus.

Enum value maps for EncryptedDataKeyType.

Enum value maps for EncryptedDataKeyType.

Enum value maps for GenericStatus.

Enum value maps for GenericStatus.

Enum value maps for LicenseStatus.

Enum value maps for LicenseStatus.

Enum value maps for LicenseType.

Enum value maps for LicenseType.

Enum value maps for LoginMethod.

Enum value maps for LoginMethod.

Enum value maps for LoginState.

Enum value maps for LoginState.

Enum value maps for LoginType.

Enum value maps for LoginType.

Enum value maps for MasterPasswordReentryActionType.

Enum value maps for MasterPasswordReentryActionType.

Enum value maps for MasterPasswordReentryStatus.

Enum value maps for MasterPasswordReentryStatus.

Enum value maps for MessageType.

Enum value maps for MessageType.

Enum value maps for ObjectTypes.

Enum value maps for ObjectTypes.

Enum value maps for PasswordMethod.

Enum value maps for PasswordMethod.

Enum value maps for Region.

Enum value maps for Region.

Enum value maps for SessionTokenType.

Enum value maps for SessionTokenType.

Enum value maps for SsoCloudSettingOperationType.

Enum value maps for SsoCloudSettingOperationType.

Enum value maps for SsoIdpType.

Enum value maps for SsoIdpType.

Enum value maps for SupportedLanguage.

Enum value maps for SupportedLanguage.

Enum value maps for ThrottleType.

Enum value maps for ThrottleType.

Enum value maps for TwoFactorChannelType.

Enum value maps for TwoFactorChannelType.

Enum value maps for TwoFactorExpiration.

Enum value maps for TwoFactorExpiration.

Enum value maps for TwoFactorPushType.

Enum value maps for TwoFactorPushType.

Enum value maps for TwoFactorValueType.

Enum value maps for TwoFactorValueType.

Enum value maps for Version.

Enum value maps for Version.

* This represents one configuration in the list.

KA sends ws message.

* This is used internally by Cloud SSO.

if mp or not, by user, include reused passwords.

* Requesting the value of or a change to an SSO Configuration.

* This is the response to an SsoConfigurationRequest.

* Request validation of one or more SsoCloudConfigurations.

* This response is sent for a configuration validation request and for a Metadata upload request.

* This request is to upload the IdP metadata file as its UTF-8 byte content.

* This allows the user to retrieve or clear SSO logs related to a service provider.

* This is used when migrating from SSO Connect to SSO Connect Cloud.

* Returns the status of an SSO Connect migration in progress.

* @since MH: 2022-01-11.

* For security, this structure is used to make a Cloud SSO login or logout request rather than sending the parameters in the URL or in a form.

* For security, this structure is used to return values from a Cloud SSO login or logout.

* This represents one SAML message in the log.

* This is the request for the SAML logs of a service provider.

* This represents an array of SAML responses from the log.

* This request is sent to retrieve the list of configurations defined in an enterprise.

* This represents a list of Configuration entries.

* This is a request to set the SSO Configuration for an SSO Service Provider, by ID.

* This performs an edit operation on a Configuration setting.

* This is the value of a Configuration setting.

* This is a request to the IdpType API.

* This is a response from the IdpType API calls.

* This is the input to the get_sso_service_provider command.

* This is the response from the get_sso_service_provider command.

* This represents the providers that share a given configuration.

KA registers login/logout.

* This is part of SsoCloudConfigurationValidationResponse.

PS sends to clients.

Client sends to push.

* Authentication protocols we support.

* Datatypes of SsoCloudSettings.

loginMethod is one of ( existing_account, sso_domain, after_sso ).

* The names and IDs in this class correspond to the Kinfo database entries and to the Region class in Keeperpap.

* This is how the client can change a Configuration setting.

v3 and forward.