feat: add Guardian settings, Organization search, Resource Server search & anonymous sessions

[fern-api]

Summary

This PR surfaces new Management API endpoints and fields across Guardian, Organizations, Resource Servers, Clients, and Experimentation.

• New Guardian Settings client (top-level get/set) and Guardian Factor Settings sub-clients (email & phone)
• Organizations - enhanced list pagination, new search (SCIM/Lucene), and get-by-name operations
• Resource Servers - new search operation
• Clients - anonymousSessions support on create, update, get, and rotate-secret payloads
• Experimentation - advanceRamp on experiments
• Tenant Settings - new sessions / anonymousSessions fields
• Errors - new GatewayTimeoutError (HTTP 504)

Guardian Settings (New)

Introduces guardian().get() and guardian().set() at the top level, and new factor settings sub-clients under guardian().factors().

Operation	Method
Get Guardian settings	guardian().get()
Update Guardian settings	guardian().set(SetGuardianSettingsRequestContent)
Get email factor settings	guardian().factors().email().get()
Update email factor settings	guardian().factors().email().set(SetEmailFactorSettingsRequestContent)
Get phone factor settings	guardian().factors().phone().get()
Update phone factor settings	guardian().factors().phone().set(SetPhoneFactorSettingsRequestContent)

SetGuardianSettingsRequestContent fields

Field	Type	Description
displayRememberMeCheckbox	Boolean	Whether to display the "Remember Me" checkbox on the MFA prompt
rememberMeDefaultValue	Boolean	Default value of the "Remember Me" checkbox
mfaSessionInactivityTimeout	Integer	MFA session inactivity timeout
mfaSessionOverallTimeout	Integer	MFA session overall timeout

Organizations - Enhanced List, Search & Get-by-Name

organizations().list() now supports both offset and checkpoint pagination with new parameters:

Parameter	Type	Description
includeTotals	Optional	Return results with total count
sort	Optional	Sort field and direction, e.g. created_at:1
includeClientAssociationFor	Optional	Client ID; matching organizations include a client association object

New operations

Operation	Method
Get organization by name	organizations().getByName(name)
Search organizations (SCIM / Lucene)	organizations().search(SearchOrganizationsRequestParameters)

organizations().search() supports cursor-based pagination and filters on name, display_name, created_at, and metadata.{key} using Lucene (default) or SCIM syntax.

Resource Servers - Search (New)

Operation	Method
Search resource servers	resourceServers().search(SearchResourceServersRequestParameters)

Clients - Anonymous Sessions

Adds anonymousSessions to client payloads.

Field	Added to
anonymousSessions (AnonymousSessions)	Client, GetClientResponseContent, RotateClientSecretResponseContent
anonymousSessions (CreateAnonymousSessions)	CreateClientRequestContent / ResponseContent
anonymousSessions (UpdateAnonymousSessions)	UpdateClientRequestContent / ResponseContent

Experimentation - Advance Ramp

Operation	Method
Advance experiment ramp	experimentation().experiments().advanceRamp(id, AdvanceRampRequestContent)

Miscellaneous

Area	Change
Tenant Settings	New sessions and anonymousSessions fields via TenantSettingsSessions / TenantSettingsSessionsAnonymous
Device Credentials	Updated type param description — omitting type returns combined refresh_tokens + public_keys; page/per_page/include_totals are ignored in that case
Errors	New GatewayTimeoutError for HTTP 504 responses

🚨 Breaking Changes

organizationTemplates() client removed

The organizationTemplates() client and all its types have been removed from both ManagementApi and AsyncManagementApi.

The create:organization_templates and update:organization_templates OAuth scopes were also removed.

ConnectionIdentityProviderEnum / ConnectionStrategyEnum values updated

Several beta connection provider values have been updated to remove the -mcp suffix, and others have been removed entirely.

Renamed

Old value	New value
asana-mcp	asana
atlassian-mcp	atlassian
gitlab-mcp	gitlab
slack-mcp	slack

Removed entirely

docusign, figma, gusto, heroku, intercom, pagerduty, supabase, vercel, xero (and their -mcp variants).

Values that retain the -mcp suffix (e.g. notion-mcp, cloudflare-mcp, hubspot-mcp, linear-mcp, sentry-mcp) are unchanged.

GuardianClient package changed

The GuardianClient and AsyncGuardianClient types returned by management.guardian() have moved from the com.auth0.client.mgmt.guardian package to com.auth0.client.mgmt. SetGuardianSettingsRequestContent has moved to com.auth0.client.mgmt.types.

Update any direct imports of these types.

Testing

• This change adds test coverage
• This change has been tested on the latest version of the platform/language or why not

Checklist

• I have read the Auth0 general contribution guidelines
• I have read the Auth0 Code of Conduct
• All existing and new tests complete without errors