From 76ff8604ad8159ae9e4f07e4b5b9fdecda32f78e Mon Sep 17 00:00:00 2001
From: "workos-sdk-automation[bot]"
 <255426317+workos-sdk-automation[bot]@users.noreply.github.com>
Date: Tue, 28 Jul 2026 20:32:54 +0000
Subject: [PATCH 1/2] chore(generated): regenerate shared files for SSO

---
 .last-synced-sha                    | 2 +-
 lib/Resource/Connection.php         | 4 ----
 lib/Service/SSO.php                 | 2 +-
 tests/Fixtures/connection.json      | 1 -
 tests/Fixtures/list_connection.json | 1 -
 5 files changed, 2 insertions(+), 8 deletions(-)

diff --git a/.last-synced-sha b/.last-synced-sha
index dd187756..93c9c21a 100644
--- a/.last-synced-sha
+++ b/.last-synced-sha
@@ -1 +1 @@
-904c5bccd2c6d0511ad2d0760e57d139143f1773
+ae3ebbb08d9b4bf9b2391558e820b7eb6f511fb9
diff --git a/lib/Resource/Connection.php b/lib/Resource/Connection.php
index 8676e2e9..3e603cd4 100644
--- a/lib/Resource/Connection.php
+++ b/lib/Resource/Connection.php
@@ -37,8 +37,6 @@ public function __construct(
         public \DateTimeImmutable $updatedAt,
         /** Unique identifier for the Organization in which the Connection resides. */
         public ?string $organizationId = null,
-        /** The immutable callback endpoint for this Connection. For SAML connections this is the ACS URL; for OIDC connections this is the redirect URI. */
-        public ?string $callbackEndpoint = null,
     ) {
     }
 
@@ -55,7 +53,6 @@ public static function fromArray(array $data): self
             createdAt: new \DateTimeImmutable($data['created_at']),
             updatedAt: new \DateTimeImmutable($data['updated_at']),
             organizationId: $data['organization_id'] ?? null,
-            callbackEndpoint: $data['callback_endpoint'] ?? null,
         );
     }
 
@@ -72,7 +69,6 @@ public function toArray(): array
             'created_at' => $this->createdAt->format(\DateTimeInterface::RFC3339_EXTENDED),
             'updated_at' => $this->updatedAt->format(\DateTimeInterface::RFC3339_EXTENDED),
             'organization_id' => $this->organizationId,
-            'callback_endpoint' => $this->callbackEndpoint,
         ];
     }
 }
diff --git a/lib/Service/SSO.php b/lib/Service/SSO.php
index 8b82c7b6..b3027624 100644
--- a/lib/Service/SSO.php
+++ b/lib/Service/SSO.php
@@ -121,7 +121,7 @@ public function deleteConnection(
      * @param string|null $domainHint Can be used to pre-fill the domain field when initiating authentication with Microsoft OAuth or with a Google SAML connection type.
      * @param string|null $loginHint Can be used to pre-fill the username/email address field of the IdP sign-in page for the user, if you know their username ahead of time. Currently supported for OAuth, OpenID Connect, Okta, Entra ID, and custom SAML connections.
      * @param string|null $nonce A random string generated by the client that is used to mitigate replay attacks.
-     * @param string|null $prompt If set to `login`, forces re-authentication at the identity provider. For SAML connections this sets `ForceAuthn="true"` in the SAML request.
+     * @param string|null $prompt If set to `login`, forces re-authentication at the identity provider. For supported SAML providers this sets `ForceAuthn="true"` in the SAML request; providers that don't support it are unaffected.
      * @return string
      * @throws \WorkOS\Exception\ConfigurationException
      */
diff --git a/tests/Fixtures/connection.json b/tests/Fixtures/connection.json
index 5d7d3b2c..92c555ad 100644
--- a/tests/Fixtures/connection.json
+++ b/tests/Fixtures/connection.json
@@ -13,7 +13,6 @@
       "domain": "foo-corp.com"
     }
   ],
-  "callback_endpoint": "https://auth.workos.com/sso/saml/acs/conn_externalkey",
   "created_at": "2026-01-15T12:00:00.000Z",
   "updated_at": "2026-01-15T12:00:00.000Z"
 }
diff --git a/tests/Fixtures/list_connection.json b/tests/Fixtures/list_connection.json
index 36fec9bc..aacf2f3d 100644
--- a/tests/Fixtures/list_connection.json
+++ b/tests/Fixtures/list_connection.json
@@ -15,7 +15,6 @@
           "domain": "foo-corp.com"
         }
       ],
-      "callback_endpoint": "https://auth.workos.com/sso/saml/acs/conn_externalkey",
       "created_at": "2026-01-15T12:00:00.000Z",
       "updated_at": "2026-01-15T12:00:00.000Z"
     }

From d24dcee6727dcc05a2c56295fad39ec53890e689 Mon Sep 17 00:00:00 2001
From: "workos-sdk-automation[bot]"
 <255426317+workos-sdk-automation[bot]@users.noreply.github.com>
Date: Tue, 28 Jul 2026 20:32:59 +0000
Subject: [PATCH 2/2] chore(generated): add release notes fragment

---
 ...7-28T20-32-59-c7b77690a4486560659df08d947039af4cd52055.md | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 .changelog-pending/2026-07-28T20-32-59-c7b77690a4486560659df08d947039af4cd52055.md

diff --git a/.changelog-pending/2026-07-28T20-32-59-c7b77690a4486560659df08d947039af4cd52055.md b/.changelog-pending/2026-07-28T20-32-59-c7b77690a4486560659df08d947039af4cd52055.md
new file mode 100644
index 00000000..eb2b02f2
--- /dev/null
+++ b/.changelog-pending/2026-07-28T20-32-59-c7b77690a4486560659df08d947039af4cd52055.md
@@ -0,0 +1,5 @@
+* [#426](https://github.com/workos/workos-php/pull/426) fix(generated): regenerate from spec
+
+  **Fixes**
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * Removed `callback_endpoint` from `Connection`