diff --git a/.changelog-pending/2026-07-28T20-32-42-c7b77690a4486560659df08d947039af4cd52055.md b/.changelog-pending/2026-07-28T20-32-42-c7b77690a4486560659df08d947039af4cd52055.md
new file mode 100644
index 00000000..b98a0b90
--- /dev/null
+++ b/.changelog-pending/2026-07-28T20-32-42-c7b77690a4486560659df08d947039af4cd52055.md
@@ -0,0 +1,5 @@
+* [#532](https://github.com/workos/workos-ruby/pull/532) fix(generated): regenerate from spec
+
+  **Fixes**
+  * **[sso](https://workos.com/docs/reference/sso)**:
+    * Removed `callback_endpoint` from `Connection`
diff --git a/.last-synced-sha b/.last-synced-sha
index dd187756..93c9c21a 100644
--- a/.last-synced-sha
+++ b/.last-synced-sha
@@ -1 +1 @@
-904c5bccd2c6d0511ad2d0760e57d139143f1773
+ae3ebbb08d9b4bf9b2391558e820b7eb6f511fb9
diff --git a/lib/workos/sso.rb b/lib/workos/sso.rb
index a6720503..894d6924 100644
--- a/lib/workos/sso.rb
+++ b/lib/workos/sso.rb
@@ -121,7 +121,7 @@ def delete_connection(
     # @param domain_hint [String, nil] Can be used to pre-fill the domain field when initiating authentication with Microsoft OAuth or with a Google SAML connection type.
     # @param login_hint [String, nil] Can be used to pre-fill the username/email address field of the IdP sign-in page for the user, if you know their username ahead of time. Currently supported for OAuth, OpenID Connect, Okta, Entra ID, and custom SAML connections.
     # @param nonce [String, nil] A random string generated by the client that is used to mitigate replay attacks.
-    # @param prompt [String, nil] If set to `login`, forces re-authentication at the identity provider. For SAML connections this sets `ForceAuthn="true"` in the SAML request.
+    # @param prompt [String, nil] If set to `login`, forces re-authentication at the identity provider. For supported SAML providers this sets `ForceAuthn="true"` in the SAML request; providers that don't support it are unaffected.
     # @return [String]
     def get_authorization_url(
       redirect_uri:,
diff --git a/lib/workos/sso/connection.rb b/lib/workos/sso/connection.rb
index 3dc71d4e..90b60559 100644
--- a/lib/workos/sso/connection.rb
+++ b/lib/workos/sso/connection.rb
@@ -13,7 +13,6 @@ class Connection < WorkOS::Types::BaseModel
       state: :state,
       status: :status,
       domains: :domains,
-      callback_endpoint: :callback_endpoint,
       created_at: :created_at,
       updated_at: :updated_at
     }.freeze
@@ -29,7 +28,6 @@ class Connection < WorkOS::Types::BaseModel
       :name,
       :state,
       :domains,
-      :callback_endpoint,
       :created_at,
       :updated_at
 
@@ -50,7 +48,6 @@ def initialize(json)
       @state = hash[:state]
       @status = hash[:status]
       @domains = (hash[:domains] || []).map { |item| item ? WorkOS::ConnectionDomain.new(item) : nil }
-      @callback_endpoint = hash[:callback_endpoint]
       @created_at = hash[:created_at]
       @updated_at = hash[:updated_at]
     end
diff --git a/rbi/workos/connection.rbi b/rbi/workos/connection.rbi
index fd8d14db..d76befd9 100644
--- a/rbi/workos/connection.rbi
+++ b/rbi/workos/connection.rbi
@@ -57,12 +57,6 @@ module WorkOS
     sig { params(value: T::Array[WorkOS::ConnectionDomain]).returns(T::Array[WorkOS::ConnectionDomain]) }
     def domains=(value); end
 
-    sig { returns(T.nilable(String)) }
-    def callback_endpoint; end
-
-    sig { params(value: T.nilable(String)).returns(T.nilable(String)) }
-    def callback_endpoint=(value); end
-
     sig { returns(String) }
     def created_at; end
 
diff --git a/test/workos/test_sso_model_round_trip.rb b/test/workos/test_sso_model_round_trip.rb
index 0c777cf9..e7e4f46b 100644
--- a/test/workos/test_sso_model_round_trip.rb
+++ b/test/workos/test_sso_model_round_trip.rb
@@ -31,7 +31,6 @@ def test_connection_round_trip
       "state" => "stub",
       "status" => "stub",
       "domains" => [],
-      "callback_endpoint" => "stub",
       "created_at" => "stub",
       "updated_at" => "stub"
     }