client.admin.createDirectorySync(params: CreateDirectorySyncParams): Promise<DirectorySync>

interface DirectorySync {
  id: string;
  organizationId: string;
  name: string;
  scimBaseUrl: string;    // SCIM endpoint URL to configure in the IdP
  scimToken: string;      // Bearer token for SCIM auth (shown once)
  status: "active" | "inactive";
  provider: string;
  lastSyncAt: string | null;
  userCount: number;
  groupCount: number;
  createdAt: string;
}

const directory = await client.admin.createDirectorySync({
  organizationId: "org_abc123",
  name: "Okta User Provisioning",
  provider: "okta",
});

console.log("Configure these in your identity provider:");
console.log("  SCIM Base URL:", directory.scimBaseUrl);
console.log("  Bearer Token:", directory.scimToken);
console.log("\nSave the token -- it will not be shown again.");

const result = await client.admin.listDirectorySyncs({
  organizationId: "org_abc123",
});

for (const dir of result.directories) {
  console.log(dir.id, dir.name, dir.status, dir.lastSyncAt, dir.userCount);
}

const status = await client.admin.getDirectorySyncStatus({
  directoryId: "dir_abc123",
});

console.log("Status:", status.status);
console.log("Users synced:", status.userCount);
console.log("Groups synced:", status.groupCount);
console.log("Last sync:", status.lastSyncAt);
console.log("Errors (24h):", status.recentErrors);

const users = await client.admin.listDirectoryUsers({
  directoryId: "dir_abc123",
  pageSize: 50,
});

for (const user of users.users) {
  console.log(user.email, user.status, user.scimExternalId, user.groups);
}

const result = await client.admin.regenerateScimToken({
  directoryId: "dir_abc123",
});

console.log("New SCIM token:", result.scimToken);
console.log("Update this in your identity provider.");

await client.admin.deleteDirectorySync({
  directoryId: "dir_abc123",
});