diff --git a/.fern/replay.lock b/.fern/replay.lock
index a702092e5..b2daa0ee6 100644
--- a/.fern/replay.lock
+++ b/.fern/replay.lock
@@ -6,5 +6,219 @@ generations:
     timestamp: 2026-05-12T04:47:13.201Z
     cli_version: unknown
     generator_versions: {}
-current_generation: 409821046d64fe47802d1e9df109b372de1d998f
-patches: []
+  - commit_sha: 10833198f7f22dc8865d845f315b3f437907409f
+    tree_hash: df936340ef63377188bc24b5814c66a2d409ef82
+    timestamp: 2026-05-21T10:33:44.550Z
+    cli_version: unknown
+    generator_versions:
+      fernapi/fern-csharp-sdk: 2.66.5
+current_generation: 10833198f7f22dc8865d845f315b3f437907409f
+patches:
+  - id: patch-4a7a2c3e
+    content_hash: sha256:afae223b4593598543491ca12e36149571f886b494dcf4311dcea092548f7bd0
+    original_commit: 4a7a2c3e44bfc06c1f164a3c6ef0ae748ce3075b
+    original_message: Adds extension to convert UserDateSchema to DateTime
+    original_author: Kailash B <kailash.b@okta.com>
+    base_generation: 10833198f7f22dc8865d845f315b3f437907409f
+    files:
+      - tests/Auth0.ManagementApi.Test/Unit/Extensions/UserDateSchemaExtensionsTest.cs
+    patch_content: |
+      diff --git a/tests/Auth0.ManagementApi.Test/Unit/Extensions/UserDateSchemaExtensionsTest.cs b/tests/Auth0.ManagementApi.Test/Unit/Extensions/UserDateSchemaExtensionsTest.cs
+      new file mode 100644
+      index 00000000..7d867ca6
+      --- /dev/null
+      +++ b/tests/Auth0.ManagementApi.Test/Unit/Extensions/UserDateSchemaExtensionsTest.cs
+      @@ -0,0 +1,95 @@
+      +using NUnit.Framework;
+      +
+      +namespace Auth0.ManagementApi.Test.Unit.Extensions;
+      +
+      +[TestFixture]
+      +public class UserDateSchemaExtensionsTest
+      +{
+      +    [Test]
+      +    public void ToDateTime_WithValidIso8601String_ReturnsUtcDateTime()
+      +    {
+      +        var schema = UserDateSchema.FromString("2024-03-15T10:30:00.000Z");
+      +
+      +        var result = schema.ToDateTime();
+      +
+      +        Assert.That(result, Is.Not.Null);
+      +        Assert.That(result!.Value, Is.EqualTo(new DateTime(2024, 3, 15, 10, 30, 0, DateTimeKind.Utc)));
+      +        Assert.That(result.Value.Kind, Is.EqualTo(DateTimeKind.Utc));
+      +    }
+      +
+      +    [Test]
+      +    public void ToDateTime_WithNull_ReturnsNull()
+      +    {
+      +        UserDateSchema? schema = null;
+      +
+      +        var result = schema.ToDateTime();
+      +
+      +        Assert.That(result, Is.Null);
+      +    }
+      +
+      +    [Test]
+      +    public void ToDateTime_WithMapType_ReturnsNull()
+      +    {
+      +        var schema = UserDateSchema.FromMapOfStringToUnknown(new Dictionary<string, object?>
+      +        {
+      +            { "some_key", "some_value" }
+      +        });
+      +
+      +        var result = schema.ToDateTime();
+      +
+      +        Assert.That(result, Is.Null);
+      +    }
+      +
+      +    [Test]
+      +    public void ToDateTime_WithMalformedString_ReturnsNull()
+      +    {
+      +        var schema = UserDateSchema.FromString("not-a-date");
+      +
+      +        var result = schema.ToDateTime();
+      +
+      +        Assert.That(result, Is.Null);
+      +    }
+      +
+      +    [Test]
+      +    public void ToDateTime_WithOffsetString_PreservesLocalKind()
+      +    {
+      +        var schema = UserDateSchema.FromString("2024-06-20T14:00:00.000+05:30");
+      +
+      +        var result = schema.ToDateTime();
+      +        var expectedLocal = new DateTimeOffset(2024, 6, 20, 14, 0, 0, TimeSpan.FromMinutes(330)).LocalDateTime;
+      +
+      +        Assert.That(result, Is.Not.Null);
+      +        Assert.That(result!.Value, Is.EqualTo(expectedLocal));
+      +        Assert.That(result.Value.Kind, Is.EqualTo(DateTimeKind.Local));
+      +    }
+      +
+      +    [Test]
+      +    public void ToDateTime_WithDateTimeOffset_ReturnsUtcConverted()
+      +    {
+      +        var schema = UserDateSchema.FromString("2024-06-20T14:00:00.000+05:30");
+      +
+      +        var result = schema.ToDateTime(TimeZoneInfo.Utc);
+      +
+      +        Assert.That(result, Is.Not.Null);
+      +        Assert.That(result!.Value.Kind, Is.EqualTo(DateTimeKind.Utc));
+      +        Assert.That(result.Value, Is.EqualTo(new DateTime(2024, 6, 20, 8, 30, 0, DateTimeKind.Utc)));
+      +    }
+      +
+      +    [Test]
+      +    public void ToDateTime_WithMalformedStringAndTargetTimeZone_ReturnsNull()
+      +    {
+      +        var schema = UserDateSchema.FromString("not-a-date");
+      +
+      +        var result = schema.ToDateTime(TimeZoneInfo.Utc);
+      +
+      +        Assert.That(result, Is.Null);
+      +    }
+      +
+      +    [Test]
+      +    public void ToDateTime_WithNullTargetTimeZone_ThrowsArgumentNullException()
+      +    {
+      +        var schema = UserDateSchema.FromString("2024-03-15T10:30:00.000Z");
+      +
+      +        Assert.Throws<ArgumentNullException>(() => schema.ToDateTime(null!));
+      +    }
+      +}
+    theirs_snapshot:
+      tests/Auth0.ManagementApi.Test/Unit/Extensions/UserDateSchemaExtensionsTest.cs: |
+        using NUnit.Framework;
+
+        namespace Auth0.ManagementApi.Test.Unit.Extensions;
+
+        [TestFixture]
+        public class UserDateSchemaExtensionsTest
+        {
+            [Test]
+            public void ToDateTime_WithValidIso8601String_ReturnsUtcDateTime()
+            {
+                var schema = UserDateSchema.FromString("2024-03-15T10:30:00.000Z");
+
+                var result = schema.ToDateTime();
+
+                Assert.That(result, Is.Not.Null);
+                Assert.That(result!.Value, Is.EqualTo(new DateTime(2024, 3, 15, 10, 30, 0, DateTimeKind.Utc)));
+                Assert.That(result.Value.Kind, Is.EqualTo(DateTimeKind.Utc));
+            }
+
+            [Test]
+            public void ToDateTime_WithNull_ReturnsNull()
+            {
+                UserDateSchema? schema = null;
+
+                var result = schema.ToDateTime();
+
+                Assert.That(result, Is.Null);
+            }
+
+            [Test]
+            public void ToDateTime_WithMapType_ReturnsNull()
+            {
+                var schema = UserDateSchema.FromMapOfStringToUnknown(new Dictionary<string, object?>
+                {
+                    { "some_key", "some_value" }
+                });
+
+                var result = schema.ToDateTime();
+
+                Assert.That(result, Is.Null);
+            }
+
+            [Test]
+            public void ToDateTime_WithMalformedString_ReturnsNull()
+            {
+                var schema = UserDateSchema.FromString("not-a-date");
+
+                var result = schema.ToDateTime();
+
+                Assert.That(result, Is.Null);
+            }
+
+            [Test]
+            public void ToDateTime_WithOffsetString_PreservesLocalKind()
+            {
+                var schema = UserDateSchema.FromString("2024-06-20T14:00:00.000+05:30");
+
+                var result = schema.ToDateTime();
+                var expectedLocal = new DateTimeOffset(2024, 6, 20, 14, 0, 0, TimeSpan.FromMinutes(330)).LocalDateTime;
+
+                Assert.That(result, Is.Not.Null);
+                Assert.That(result!.Value, Is.EqualTo(expectedLocal));
+                Assert.That(result.Value.Kind, Is.EqualTo(DateTimeKind.Local));
+            }
+
+            [Test]
+            public void ToDateTime_WithDateTimeOffset_ReturnsUtcConverted()
+            {
+                var schema = UserDateSchema.FromString("2024-06-20T14:00:00.000+05:30");
+
+                var result = schema.ToDateTime(TimeZoneInfo.Utc);
+
+                Assert.That(result, Is.Not.Null);
+                Assert.That(result!.Value.Kind, Is.EqualTo(DateTimeKind.Utc));
+                Assert.That(result.Value, Is.EqualTo(new DateTime(2024, 6, 20, 8, 30, 0, DateTimeKind.Utc)));
+            }
+
+            [Test]
+            public void ToDateTime_WithMalformedStringAndTargetTimeZone_ReturnsNull()
+            {
+                var schema = UserDateSchema.FromString("not-a-date");
+
+                var result = schema.ToDateTime(TimeZoneInfo.Utc);
+
+                Assert.That(result, Is.Null);
+            }
+
+            [Test]
+            public void ToDateTime_WithNullTargetTimeZone_ThrowsArgumentNullException()
+            {
+                var schema = UserDateSchema.FromString("2024-03-15T10:30:00.000Z");
+
+                Assert.Throws<ArgumentNullException>(() => schema.ToDateTime(null!));
+            }
+        }
+    user_owned: true
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
new file mode 100644
index 000000000..1de047696
--- /dev/null
+++ b/CONTRIBUTING.md
@@ -0,0 +1,119 @@
+# Contributing
+
+Thanks for your interest in contributing to this SDK! This document provides guidelines for contributing to the project.
+
+## Getting Started
+
+### Prerequisites
+
+- .NET SDK (version compatible with the target frameworks: net462, net8.0, netstandard2.0)
+
+### Installation
+
+Install the project dependencies:
+
+```bash
+dotnet restore
+```
+
+### Building
+
+Build the project:
+
+```bash
+dotnet build
+```
+
+### Testing
+
+Run the test suite:
+
+```bash
+dotnet test
+```
+
+### Formatting
+
+Check code style:
+
+```bash
+dotnet format --verify-no-changes
+```
+
+Fix code style issues:
+
+```bash
+dotnet format
+```
+
+## About Generated Code
+
+**Important**: Most files in this SDK are automatically generated by [Fern](https://buildwithfern.com) from the API definition. Direct modifications to generated files will be overwritten the next time the SDK is generated.
+
+### Generated Files
+
+The following directories contain generated code:
+- `src/` - API client classes and types
+- Most C# files in the project
+
+### How to Customize
+
+If you need to customize the SDK, you have two options:
+
+#### Option 1: Use `.fernignore`
+
+For custom code that should persist across SDK regenerations:
+
+1. Create a `.fernignore` file in the project root
+2. Add file patterns for files you want to preserve (similar to `.gitignore` syntax)
+3. Add your custom code to those files
+
+Files listed in `.fernignore` will not be overwritten when the SDK is regenerated.
+
+For more information, see the [Fern documentation on custom code](https://buildwithfern.com/learn/sdks/overview/custom-code).
+
+#### Option 2: Contribute to the Generator
+
+If you want to change how code is generated for all users of this SDK:
+
+1. The C# SDK generator lives in the [Fern repository](https://github.com/fern-api/fern)
+2. Generator code is located at `generators/csharp/`
+3. Follow the [Fern contributing guidelines](https://github.com/fern-api/fern/blob/main/CONTRIBUTING.md)
+4. Submit a pull request with your changes to the generator
+
+This approach is best for:
+- Bug fixes in generated code
+- New features that would benefit all users
+- Improvements to code generation patterns
+
+## Making Changes
+
+### Workflow
+
+1. Create a new branch for your changes
+2. Make your modifications
+3. Run tests to ensure nothing breaks: `dotnet test`
+4. Run formatting: `dotnet format`
+5. Build the project: `dotnet build`
+6. Commit your changes with a clear commit message
+7. Push your branch and create a pull request
+
+### Commit Messages
+
+Write clear, descriptive commit messages that explain what changed and why.
+
+### Code Style
+
+This project uses automated code formatting. Run `dotnet format` before committing to ensure your code meets the project's style guidelines.
+
+## Questions or Issues?
+
+If you have questions or run into issues:
+
+1. Check the [Fern documentation](https://buildwithfern.com)
+2. Search existing [GitHub issues](https://github.com/fern-api/fern/issues)
+3. Open a new issue if your question hasn't been addressed
+
+## License
+
+By contributing to this project, you agree that your contributions will be licensed under the same license as the project.
diff --git a/reference.md b/reference.md
index 8106b4045..7c1909646 100644
--- a/reference.md
+++ b/reference.md
@@ -255,7 +255,7 @@ await client.Actions.DeleteAsync("id", new DeleteActionRequestParameters { Force
 <dl>
 <dd>
 
-Update an existing action. If this action is currently bound to a trigger, updating it will <strong>not</strong> affect any user flows until the action is deployed.
+Update an existing action. If this action is currently bound to a trigger, updating it will **not** affect any user flows until the action is deployed.
 </dd>
 </dl>
 </dd>
@@ -1054,10 +1054,19 @@ await client.Clients.PreviewCimdMetadataAsync(
 <dl>
 <dd>
 
+Idempotent registration for Client ID Metadata Document (CIMD) clients.
+Uses external_client_id as the unique identifier for upsert operations.
 
-      Idempotent registration for Client ID Metadata Document (CIMD) clients.
-      Uses external_client_id as the unique identifier for upsert operations.
-      **Create:** Returns 201 when a new client is created (requires \
+<strong>Create:</strong> Returns 201 when a new client is created (requires <code>create:clients</code> scope).
+<strong>Update:</strong> Returns 200 when an existing client is updated (requires <code>update:clients</code> scope).
+
+This endpoint automatically:
+<ul>
+  <li>Fetches and validates the metadata document</li>
+  <li>Maps CIMD fields to Auth0 client configuration</li>
+  <li>Creates/rotates credentials from the JWKS</li>
+  <li>Enforces CIMD security policies (HTTPS-only, no shared secrets)</li>
+</ul>
 </dd>
 </dl>
 </dd>
@@ -1767,25 +1776,23 @@ await client.ConnectionProfiles.UpdateAsync("id", new UpdateConnectionProfileReq
 <dl>
 <dd>
 
-Retrieves detailed list of all <a href="https://auth0.com/docs/authenticate/identity-providers">connections</a> that match the specified strategy. If no strategy is provided, all connections within your tenant are retrieved. This action can accept a list of fields to include or exclude from the resulting list of connections. 
+Retrieves detailed list of all [connections](https://auth0.com/docs/authenticate/identity-providers) that match the specified strategy. If no strategy is provided, all connections within your tenant are retrieved. This action can accept a list of fields to include or exclude from the resulting list of connections. 
 
 This endpoint supports two types of pagination:
-<ul>
-<li>Offset pagination</li>
-<li>Checkpoint pagination</li>
-</ul>
+
+- Offset pagination
+- Checkpoint pagination
 
 Checkpoint pagination must be used if you need to retrieve more than 1000 connections.
 
-<h2>Checkpoint Pagination</h2>
+**Checkpoint Pagination**
 
 To search by checkpoint, use the following parameters:
-<ul>
-<li><code>from</code>: Optional id from which to start selection.</li>
-<li><code>take</code>: The total amount of entries to retrieve when using the from parameter. Defaults to 50.</li>
-</ul>
 
-<b>Note</b>: The first time you call this endpoint using checkpoint pagination, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no pages are remaining.
+- `from`: Optional id from which to start selection.
+- `take`: The total amount of entries to retrieve when using the from parameter. Defaults to 50.
+
+**Note**: The first time you call this endpoint using checkpoint pagination, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no pages are remaining.
 </dd>
 </dl>
 </dd>
@@ -1849,9 +1856,9 @@ await client.Connections.ListAsync(
 <dl>
 <dd>
 
-Creates a new connection according to the JSON object received in <code>body</code>.
+Creates a new connection according to the JSON object received in `body`.
 
-<b>Note:</b> If a connection with the same name was recently deleted and had a large number of associated users, the deletion may still be processing. Creating a new connection with that name before the deletion completes may fail or produce unexpected results. 
+**Note:** If a connection with the same name was recently deleted and had a large number of associated users, the deletion may still be processing. Creating a new connection with that name before the deletion completes may fail or produce unexpected results.
 </dd>
 </dl>
 </dd>
@@ -1911,7 +1918,7 @@ await client.Connections.CreateAsync(
 <dl>
 <dd>
 
-Retrieve details for a specified <a href="https://auth0.com/docs/authenticate/identity-providers">connection</a> along with options that can be used for identity provider configuration.
+Retrieve details for a specified [connection](https://auth0.com/docs/authenticate/identity-providers) along with options that can be used for identity provider configuration.
 </dd>
 </dl>
 </dd>
@@ -1976,9 +1983,9 @@ await client.Connections.GetAsync(
 <dl>
 <dd>
 
-Removes a specific <a href="https://auth0.com/docs/authenticate/identity-providers">connection</a> from your tenant. This action cannot be undone. Once removed, users can no longer use this connection to authenticate.
+Removes a specific [connection](https://auth0.com/docs/authenticate/identity-providers) from your tenant. This action cannot be undone. Once removed, users can no longer use this connection to authenticate.
 
-<b>Note:</b> If your connection has a large amount of users associated with it, please be aware that this operation can be long running after the response is returned and may impact concurrent <a href="https://auth0.com/docs/api/management/v2/connections/post-connections">create connection</a> requests, if they use an identical connection name. 
+**Note:** If your connection has a large amount of users associated with it, please be aware that this operation can be long running after the response is returned and may impact concurrent [create connection](https://auth0.com/docs/api/management/v2/connections/post-connections) requests, if they use an identical connection name.
 </dd>
 </dl>
 </dd>
@@ -2032,9 +2039,9 @@ await client.Connections.DeleteAsync("id");
 <dl>
 <dd>
 
-Update details for a specific <a href="https://auth0.com/docs/authenticate/identity-providers">connection</a>, including option properties for identity provider configuration.
+Update details for a specific [connection](https://auth0.com/docs/authenticate/identity-providers), including option properties for identity provider configuration.
 
-<b>Note</b>: If you use the <code>options</code> parameter, the entire <code>options</code> object is overriden. To avoid partial data or other issues, ensure all parameters are present when using this option.
+**Note**: If you use the `options` parameter, the entire `options` object is overridden. To avoid partial data or other issues, ensure all parameters are present when using this option.
 </dd>
 </dl>
 </dd>
@@ -2096,7 +2103,7 @@ await client.Connections.UpdateAsync("id", new UpdateConnectionRequestContent())
 <dl>
 <dd>
 
-Retrieves the status of an ad/ldap connection referenced by its <code>ID</code>. <code>200 OK</code> http status code response is returned  when the connection is online, otherwise a <code>404</code> status code is returned along with an error message
+Retrieves the status of an ad/ldap connection referenced by its `ID`. `200 OK` http status code response is returned  when the connection is online, otherwise a `404` status code is returned along with an error message
 </dd>
 </dl>
 </dd>
@@ -2151,7 +2158,7 @@ await client.Connections.CheckStatusAsync("id");
 <dl>
 <dd>
 
-Retrieve details on <a href="https://auth0.com/docs/custom-domains">custom domains</a>.
+Retrieve details on [custom domains](https://auth0.com/docs/custom-domains).
 </dd>
 </dl>
 </dd>
@@ -2223,7 +2230,6 @@ Optional attributes that can be updated:
 - custom_client_ip_header
 - tls_policy
 
-
 TLS Policies:
 
 - recommended - for modern usage this includes TLS 1.2 only
@@ -2496,23 +2502,31 @@ These are the attributes that can be updated:
 - custom_client_ip_header
 - tls_policy
 
-<h5>Updating CUSTOM_CLIENT_IP_HEADER for a custom domain</h5>To update the <code>custom_client_ip_header</code> for a domain, the body to
+**Updating CUSTOM_CLIENT_IP_HEADER for a custom domain**
+
+To update the `custom_client_ip_header` for a domain, the body to
 send should be:
-<pre><code>{ "custom_client_ip_header": "cf-connecting-ip" }</code></pre>
 
-<h5>Updating TLS_POLICY for a custom domain</h5>To update the <code>tls_policy</code> for a domain, the body to send should be:
-<pre><code>{ "tls_policy": "recommended" }</code></pre>
+```json
+{ "custom_client_ip_header": "cf-connecting-ip" }
+```
+
+**Updating TLS_POLICY for a custom domain**
 
+To update the `tls_policy` for a domain, the body to send should be:
+
+```json
+{ "tls_policy": "recommended" }
+```
 
 TLS Policies:
 
 - recommended - for modern usage this includes TLS 1.2 only
 
-
 Some considerations:
 
 - The TLS ciphers and protocols available in each TLS policy follow industry recommendations, and may be updated occasionally.
-- The <code>compatible</code> TLS policy is no longer supported.
+- The `compatible` TLS policy is no longer supported.
 </dd>
 </dl>
 </dd>
@@ -2630,12 +2644,12 @@ await client.CustomDomains.TestAsync("id");
 
 Run the verification process on a custom domain.
 
-Note: Check the <code>status</code> field to see its verification status. Once verification is complete, it may take up to 10 minutes before the custom domain can start accepting requests.
+Note: Check the `status` field to see its verification status. Once verification is complete, it may take up to 10 minutes before the custom domain can start accepting requests.
 
-For <code>self_managed_certs</code>, when the custom domain is verified for the first time, the response will also include the <code>cname_api_key</code> which you will need to configure your proxy. This key must be kept secret, and is used to validate the proxy requests.
+For `self_managed_certs`, when the custom domain is verified for the first time, the response will also include the `cname_api_key` which you will need to configure your proxy. This key must be kept secret, and is used to validate the proxy requests.
 
-<a href="https://auth0.com/docs/custom-domains#step-2-verify-ownership">Learn more</a> about verifying custom domains that use Auth0 Managed certificates.
-<a href="https://auth0.com/docs/custom-domains/self-managed-certificates#step-2-verify-ownership">Learn more</a> about verifying custom domains that use Self Managed certificates.
+[Learn more](https://auth0.com/docs/custom-domains#step-2-verify-ownership) about verifying custom domains that use Auth0 Managed certificates.
+[Learn more](https://auth0.com/docs/custom-domains/self-managed-certificates#step-2-verify-ownership) about verifying custom domains that use Self Managed certificates.
 </dd>
 </dl>
 </dd>
@@ -4288,7 +4302,7 @@ await client.Groups.DeleteAsync("id");
 <dl>
 <dd>
 
-Retrieve all <a href="https://auth0.com/docs/hooks">hooks</a>. Accepts a list of fields to include or exclude in the result.
+Retrieve all [hooks](https://auth0.com/docs/hooks). Accepts a list of fields to include or exclude in the result.
 </dd>
 </dl>
 </dd>
@@ -4413,7 +4427,7 @@ await client.Hooks.CreateAsync(
 <dl>
 <dd>
 
-Retrieve <a href="https://auth0.com/docs/hooks">a hook</a> by its ID. Accepts a list of fields to include in the result.
+Retrieve [a hook](https://auth0.com/docs/hooks) by its ID. Accepts a list of fields to include in the result.
 </dd>
 </dl>
 </dd>
@@ -7261,7 +7275,7 @@ await client.Roles.UpdateAsync("id", new UpdateRoleRequestContent());
 <dl>
 <dd>
 
-Retrieve a filtered list of <a href="https://auth0.com/docs/rules">rules</a>. Accepts a list of fields to include or exclude.
+Retrieve a filtered list of [rules](https://auth0.com/docs/rules). Accepts a list of fields to include or exclude.
 </dd>
 </dl>
 </dd>
@@ -7325,9 +7339,9 @@ await client.Rules.ListAsync(
 <dl>
 <dd>
 
-Create a <a href="https://auth0.com/docs/rules#create-a-new-rule-using-the-management-api">new rule</a>.
+Create a [new rule](https://auth0.com/docs/rules#create-a-new-rule-using-the-management-api).
 
-Note: Changing a rule's stage of execution from the default <code>login_success</code> can change the rule's function signature to have user omitted.
+Note: Changing a rule's stage of execution from the default `login_success` can change the rule's function signature to have user omitted.
 </dd>
 </dl>
 </dd>
@@ -7381,7 +7395,7 @@ await client.Rules.CreateAsync(new CreateRuleRequestContent { Name = "name", Scr
 <dl>
 <dd>
 
-Retrieve <a href="https://auth0.com/docs/rules">rule</a> details. Accepts a list of fields to include or exclude in the result.
+Retrieve [rule](https://auth0.com/docs/rules) details. Accepts a list of fields to include or exclude in the result.
 </dd>
 </dl>
 </dd>
@@ -11693,28 +11707,28 @@ await client.Branding.Templates.GetUniversalLoginAsync();
 
 Update the Universal Login branding template.
 
-<p>When <code>content-type</code> header is set to <code>application/json</code>:</p>
-<pre>
+When `content-type` header is set to `application/json`:
+
+```json
 {
-  "template": "&lt;!DOCTYPE html&gt;{% assign resolved_dir = dir | default: "auto" %}&lt;html lang="{{locale}}" dir="{{resolved_dir}}"&gt;&lt;head&gt;{%- auth0:head -%}&lt;/head&gt;&lt;body class="_widget-auto-layout"&gt;{%- auth0:widget -%}&lt;/body&gt;&lt;/html&gt;"
+  "template": "<!DOCTYPE html>{% assign resolved_dir = dir | default: \"auto\" %}<html lang=\"{{locale}}\" dir=\"{{resolved_dir}}\"><head>{%- auth0:head -%}</head><body class=\"_widget-auto-layout\">{%- auth0:widget -%}</body></html>"
 }
-</pre>
+```
+
+When `content-type` header is set to `text/html`:
 
-<p>
-  When <code>content-type</code> header is set to <code>text/html</code>:
-</p>
-<pre>
-&lt!DOCTYPE html&gt;
+```html
+<!DOCTYPE html>
 {% assign resolved_dir = dir | default: "auto" %}
-&lt;html lang="{{locale}}" dir="{{resolved_dir}}"&gt;
-  &lt;head&gt;
+<html lang="{{locale}}" dir="{{resolved_dir}}">
+  <head>
     {%- auth0:head -%}
-  &lt;/head&gt;
-  &lt;body class="_widget-auto-layout"&gt;
+  </head>
+  <body class="_widget-auto-layout">
     {%- auth0:widget -%}
-  &lt;/body&gt;
-&lt;/html&gt;
-</pre>
+  </body>
+</html>
+```
 </dd>
 </dl>
 </dd>
@@ -14162,9 +14176,9 @@ await client.Connections.ScimConfiguration.GetDefaultMappingAsync("id");
 <dl>
 <dd>
 
-Retrieve all clients that have the specified <a href="https://auth0.com/docs/authenticate/identity-providers">connection</a> enabled.
+Retrieve all clients that have the specified [connection](https://auth0.com/docs/authenticate/identity-providers) enabled.
 
-<b>Note</b>: The first time you call this endpoint, omit the <code>from</code> parameter. If there are more results, a <code>next</code> value is included in the response. You can use this for subsequent API calls. When <code>next</code> is no longer included in the response, no further results are remaining.
+**Note**: The first time you call this endpoint, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no further results are remaining.
 </dd>
 </dl>
 </dd>
@@ -17570,7 +17584,7 @@ await client.Guardian.Factors.Duo.Settings.UpdateAsync(
 <dl>
 <dd>
 
-Retrieve a hook's secrets by the ID of the hook. 
+Retrieve a hook's secrets by the ID of the hook.
 </dd>
 </dl>
 </dd>
@@ -17624,7 +17638,7 @@ await client.Hooks.Secrets.GetAsync("id");
 <dl>
 <dd>
 
-Add one or more secrets to an existing hook. Accepts an object of key-value pairs, where the key is the name of the secret. A hook can have a maximum of 20 secrets. 
+Add one or more secrets to an existing hook. Accepts an object of key-value pairs, where the key is the name of the secret. A hook can have a maximum of 20 secrets.
 </dd>
 </dl>
 </dd>
@@ -17689,7 +17703,7 @@ await client.Hooks.Secrets.CreateAsync(
 <dl>
 <dd>
 
-Delete one or more existing secrets for a given hook. Accepts an array of secret names to delete. 
+Delete one or more existing secrets for a given hook. Accepts an array of secret names to delete.
 </dd>
 </dl>
 </dd>
@@ -17751,7 +17765,7 @@ await client.Hooks.Secrets.DeleteAsync("id", new List<string>() { "string" });
 <dl>
 <dd>
 
-Update one or more existing secrets for an existing hook. Accepts an object of key-value pairs, where the key is the name of the existing secret. 
+Update one or more existing secrets for an existing hook. Accepts an object of key-value pairs, where the key is the name of the existing secret.
 </dd>
 </dl>
 </dd>
@@ -20674,7 +20688,7 @@ await client.Prompts.Rendering.ListAsync(
 <dl>
 <dd>
 
-Learn more about <a href='https://auth0.com/docs/customize/login-pages/advanced-customizations/getting-started/configure-acul-screens'>configuring render settings</a> for advanced customization.
+Learn more about [configuring render settings](https://auth0.com/docs/customize/login-pages/advanced-customizations/getting-started/configure-acul-screens) for advanced customization.
 </dd>
 </dl>
 </dd>
@@ -20802,7 +20816,7 @@ await client.Prompts.Rendering.GetAsync(PromptGroupNameEnum.Login, ScreenGroupNa
 <dl>
 <dd>
 
-Learn more about <a href='https://auth0.com/docs/customize/login-pages/advanced-customizations/getting-started/configure-acul-screens'>configuring render settings</a> for advanced customization.
+Learn more about [configuring render settings](https://auth0.com/docs/customize/login-pages/advanced-customizations/getting-started/configure-acul-screens) for advanced customization.
 </dd>
 </dl>
 </dd>
diff --git a/src/Auth0.ManagementApi/Actions/ActionsClient.cs b/src/Auth0.ManagementApi/Actions/ActionsClient.cs
index ae76d3ac3..7376c97f6 100644
--- a/src/Auth0.ManagementApi/Actions/ActionsClient.cs
+++ b/src/Auth0.ManagementApi/Actions/ActionsClient.cs
@@ -748,7 +748,7 @@ public async Task DeleteAsync(
     }
 
     /// <summary>
-    /// Update an existing action. If this action is currently bound to a trigger, updating it will <b>not</b> affect any user flows until the action is deployed.
+    /// Update an existing action. If this action is currently bound to a trigger, updating it will **not** affect any user flows until the action is deployed.
     /// </summary>
     /// <example><code>
     /// await client.Actions.UpdateAsync("id", new UpdateActionRequestContent());
diff --git a/src/Auth0.ManagementApi/Actions/IActionsClient.cs b/src/Auth0.ManagementApi/Actions/IActionsClient.cs
index a21f1119c..237d05ac8 100644
--- a/src/Auth0.ManagementApi/Actions/IActionsClient.cs
+++ b/src/Auth0.ManagementApi/Actions/IActionsClient.cs
@@ -48,7 +48,7 @@ Task DeleteAsync(
     );
 
     /// <summary>
-    /// Update an existing action. If this action is currently bound to a trigger, updating it will <b>not</b> affect any user flows until the action is deployed.
+    /// Update an existing action. If this action is currently bound to a trigger, updating it will **not** affect any user flows until the action is deployed.
     /// </summary>
     WithRawResponseTask<UpdateActionResponseContent> UpdateAsync(
         string id,
diff --git a/src/Auth0.ManagementApi/Auth0.ManagementApi.csproj b/src/Auth0.ManagementApi/Auth0.ManagementApi.csproj
index 70f2f5a6d..efc3b8fdb 100644
--- a/src/Auth0.ManagementApi/Auth0.ManagementApi.csproj
+++ b/src/Auth0.ManagementApi/Auth0.ManagementApi.csproj
@@ -5,7 +5,7 @@
     <ImplicitUsings>enable</ImplicitUsings>
     <LangVersion>12</LangVersion>
     <Nullable>enable</Nullable>
-    <Version>7.45.1</Version>
+    <Version>7.46.0</Version>
     <AssemblyVersion>$(Version)</AssemblyVersion>
     <FileVersion>$(Version)</FileVersion>
     <PackageReadmeFile>README.md</PackageReadmeFile>
diff --git a/src/Auth0.ManagementApi/Branding/Templates/ITemplatesClient.cs b/src/Auth0.ManagementApi/Branding/Templates/ITemplatesClient.cs
index e7a411b21..a37c12410 100644
--- a/src/Auth0.ManagementApi/Branding/Templates/ITemplatesClient.cs
+++ b/src/Auth0.ManagementApi/Branding/Templates/ITemplatesClient.cs
@@ -12,18 +12,18 @@ WithRawResponseTask<GetUniversalLoginTemplateResponseContent> GetUniversalLoginA
     /// <summary>
     /// Update the Universal Login branding template.
     ///
-    /// <para>When <c>content-type</c> header is set to <c>application/json</c>:</para>
-    /// <code>
+    /// When `content-type` header is set to `application/json`:
+    ///
+    /// ```json
     /// {
-    ///   "template": "&lt;!DOCTYPE html&gt;{% assign resolved_dir = dir | default: "auto" %}&lt;html lang="{{locale}}" dir="{{resolved_dir}}"&gt;&lt;head&gt;{%- auth0:head -%}&lt;/head&gt;&lt;body class="_widget-auto-layout"&gt;{%- auth0:widget -%}&lt;/body&gt;&lt;/html&gt;"
+    ///   "template": "{% assign resolved_dir = dir | default: \"auto\" %}&lt;html lang=\"{{locale}}\" dir=\"{{resolved_dir}}\"&gt;&lt;head&gt;{%- auth0:head -%}&lt;/head&gt;&lt;body class=\"_widget-auto-layout\"&gt;{%- auth0:widget -%}&lt;/body&gt;&lt;/html&gt;"
     /// }
-    /// </code>
+    /// ```
+    ///
+    /// When `content-type` header is set to `text/html`:
+    ///
+    /// ```html
     ///
-    /// <para>
-    ///   When <c>content-type</c> header is set to <c>text/html</c>:
-    /// </para>
-    /// <code>
-    /// &lt!DOCTYPE html&gt;
     /// {% assign resolved_dir = dir | default: "auto" %}
     /// &lt;html lang="{{locale}}" dir="{{resolved_dir}}"&gt;
     ///   &lt;head&gt;
@@ -33,7 +33,7 @@ WithRawResponseTask<GetUniversalLoginTemplateResponseContent> GetUniversalLoginA
     ///     {%- auth0:widget -%}
     ///   &lt;/body&gt;
     /// &lt;/html&gt;
-    /// </code>
+    /// ```
     /// </summary>
     Task UpdateUniversalLoginAsync(
         UpdateUniversalLoginTemplateRequestContent request,
diff --git a/src/Auth0.ManagementApi/Branding/Templates/TemplatesClient.cs b/src/Auth0.ManagementApi/Branding/Templates/TemplatesClient.cs
index 2265b8a92..4b2bd56c3 100644
--- a/src/Auth0.ManagementApi/Branding/Templates/TemplatesClient.cs
+++ b/src/Auth0.ManagementApi/Branding/Templates/TemplatesClient.cs
@@ -117,18 +117,18 @@ public WithRawResponseTask<GetUniversalLoginTemplateResponseContent> GetUniversa
     /// <summary>
     /// Update the Universal Login branding template.
     ///
-    /// <para>When <c>content-type</c> header is set to <c>application/json</c>:</para>
-    /// <code>
+    /// When `content-type` header is set to `application/json`:
+    ///
+    /// ```json
     /// {
-    ///   "template": "&lt;!DOCTYPE html&gt;{% assign resolved_dir = dir | default: "auto" %}&lt;html lang="{{locale}}" dir="{{resolved_dir}}"&gt;&lt;head&gt;{%- auth0:head -%}&lt;/head&gt;&lt;body class="_widget-auto-layout"&gt;{%- auth0:widget -%}&lt;/body&gt;&lt;/html&gt;"
+    ///   "template": "{% assign resolved_dir = dir | default: \"auto\" %}&lt;html lang=\"{{locale}}\" dir=\"{{resolved_dir}}\"&gt;&lt;head&gt;{%- auth0:head -%}&lt;/head&gt;&lt;body class=\"_widget-auto-layout\"&gt;{%- auth0:widget -%}&lt;/body&gt;&lt;/html&gt;"
     /// }
-    /// </code>
+    /// ```
+    ///
+    /// When `content-type` header is set to `text/html`:
+    ///
+    /// ```html
     ///
-    /// <para>
-    ///   When <c>content-type</c> header is set to <c>text/html</c>:
-    /// </para>
-    /// <code>
-    /// &lt!DOCTYPE html&gt;
     /// {% assign resolved_dir = dir | default: "auto" %}
     /// &lt;html lang="{{locale}}" dir="{{resolved_dir}}"&gt;
     ///   &lt;head&gt;
@@ -138,7 +138,7 @@ public WithRawResponseTask<GetUniversalLoginTemplateResponseContent> GetUniversa
     ///     {%- auth0:widget -%}
     ///   &lt;/body&gt;
     /// &lt;/html&gt;
-    /// </code>
+    /// ```
     /// </summary>
     /// <example><code>
     /// await client.Branding.Templates.UpdateUniversalLoginAsync("string");
diff --git a/src/Auth0.ManagementApi/Clients/ClientsClient.cs b/src/Auth0.ManagementApi/Clients/ClientsClient.cs
index 98298766f..a0f3e638d 100644
--- a/src/Auth0.ManagementApi/Clients/ClientsClient.cs
+++ b/src/Auth0.ManagementApi/Clients/ClientsClient.cs
@@ -863,8 +863,18 @@ public WithRawResponseTask<PreviewCimdMetadataResponseContent> PreviewCimdMetada
 
     /// <summary>
     /// Idempotent registration for Client ID Metadata Document (CIMD) clients.
-    ///       Uses external_client_id as the unique identifier for upsert operations.
-    ///       **Create:** Returns 201 when a new client is created (requires \
+    /// Uses external_client_id as the unique identifier for upsert operations.
+    ///
+    /// <b>Create:</b> Returns 201 when a new client is created (requires <c>create:clients</c> scope).
+    /// <b>Update:</b> Returns 200 when an existing client is updated (requires <c>update:clients</c> scope).
+    ///
+    /// This endpoint automatically:
+    /// <list type="bullet">
+    ///   <item><description>Fetches and validates the metadata document</description></item>
+    ///   <item><description>Maps CIMD fields to Auth0 client configuration</description></item>
+    ///   <item><description>Creates/rotates credentials from the JWKS</description></item>
+    ///   <item><description>Enforces CIMD security policies (HTTPS-only, no shared secrets)</description></item>
+    /// </list>
     /// </summary>
     /// <example><code>
     /// await client.Clients.RegisterCimdClientAsync(
diff --git a/src/Auth0.ManagementApi/Clients/IClientsClient.cs b/src/Auth0.ManagementApi/Clients/IClientsClient.cs
index fc099e06a..b414be580 100644
--- a/src/Auth0.ManagementApi/Clients/IClientsClient.cs
+++ b/src/Auth0.ManagementApi/Clients/IClientsClient.cs
@@ -84,8 +84,18 @@ WithRawResponseTask<PreviewCimdMetadataResponseContent> PreviewCimdMetadataAsync
 
     /// <summary>
     /// Idempotent registration for Client ID Metadata Document (CIMD) clients.
-    ///       Uses external_client_id as the unique identifier for upsert operations.
-    ///       **Create:** Returns 201 when a new client is created (requires \
+    /// Uses external_client_id as the unique identifier for upsert operations.
+    ///
+    /// <b>Create:</b> Returns 201 when a new client is created (requires <c>create:clients</c> scope).
+    /// <b>Update:</b> Returns 200 when an existing client is updated (requires <c>update:clients</c> scope).
+    ///
+    /// This endpoint automatically:
+    /// <list type="bullet">
+    ///   <item><description>Fetches and validates the metadata document</description></item>
+    ///   <item><description>Maps CIMD fields to Auth0 client configuration</description></item>
+    ///   <item><description>Creates/rotates credentials from the JWKS</description></item>
+    ///   <item><description>Enforces CIMD security policies (HTTPS-only, no shared secrets)</description></item>
+    /// </list>
     /// </summary>
     WithRawResponseTask<RegisterCimdClientResponseContent> RegisterCimdClientAsync(
         RegisterCimdClientRequestContent request,
diff --git a/src/Auth0.ManagementApi/Clients/Requests/CreateClientRequestContent.cs b/src/Auth0.ManagementApi/Clients/Requests/CreateClientRequestContent.cs
index 2888d7491..e5feecfcf 100644
--- a/src/Auth0.ManagementApi/Clients/Requests/CreateClientRequestContent.cs
+++ b/src/Auth0.ManagementApi/Clients/Requests/CreateClientRequestContent.cs
@@ -206,6 +206,10 @@ public record CreateClientRequestContent
     [JsonPropertyName("native_social_login")]
     public NativeSocialLogin? NativeSocialLogin { get; set; }
 
+    [Optional]
+    [JsonPropertyName("fedcm_login")]
+    public FedCmLogin? FedcmLogin { get; set; }
+
     [Nullable, Optional]
     [JsonPropertyName("refresh_token")]
     public Optional<ClientRefreshTokenConfiguration?> RefreshToken { get; set; }
diff --git a/src/Auth0.ManagementApi/Clients/Requests/UpdateClientRequestContent.cs b/src/Auth0.ManagementApi/Clients/Requests/UpdateClientRequestContent.cs
index 34b5b7b80..583b52a1a 100644
--- a/src/Auth0.ManagementApi/Clients/Requests/UpdateClientRequestContent.cs
+++ b/src/Auth0.ManagementApi/Clients/Requests/UpdateClientRequestContent.cs
@@ -224,6 +224,10 @@ public record UpdateClientRequestContent
     [JsonPropertyName("native_social_login")]
     public NativeSocialLogin? NativeSocialLogin { get; set; }
 
+    [Optional]
+    [JsonPropertyName("fedcm_login")]
+    public FedCmLogin? FedcmLogin { get; set; }
+
     [Nullable, Optional]
     [JsonPropertyName("refresh_token")]
     public Optional<ClientRefreshTokenConfiguration?> RefreshToken { get; set; }
diff --git a/src/Auth0.ManagementApi/Connections/Clients/ClientsClient.cs b/src/Auth0.ManagementApi/Connections/Clients/ClientsClient.cs
index 293ae4a34..e2add2f9e 100644
--- a/src/Auth0.ManagementApi/Connections/Clients/ClientsClient.cs
+++ b/src/Auth0.ManagementApi/Connections/Clients/ClientsClient.cs
@@ -14,9 +14,9 @@ internal ClientsClient(RawClient client)
     }
 
     /// <summary>
-    /// Retrieve all clients that have the specified <see href="https://auth0.com/docs/authenticate/identity-providers">connection</see> enabled.
+    /// Retrieve all clients that have the specified [connection](https://auth0.com/docs/authenticate/identity-providers) enabled.
     ///
-    /// <b>Note</b>: The first time you call this endpoint, omit the <c>from</c> parameter. If there are more results, a <c>next</c> value is included in the response. You can use this for subsequent API calls. When <c>next</c> is no longer included in the response, no further results are remaining.
+    /// **Note**: The first time you call this endpoint, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no further results are remaining.
     /// </summary>
     private WithRawResponseTask<GetConnectionEnabledClientsResponseContent> GetInternalAsync(
         string id,
@@ -131,9 +131,9 @@ private async Task<
     }
 
     /// <summary>
-    /// Retrieve all clients that have the specified <see href="https://auth0.com/docs/authenticate/identity-providers">connection</see> enabled.
+    /// Retrieve all clients that have the specified [connection](https://auth0.com/docs/authenticate/identity-providers) enabled.
     ///
-    /// <b>Note</b>: The first time you call this endpoint, omit the <c>from</c> parameter. If there are more results, a <c>next</c> value is included in the response. You can use this for subsequent API calls. When <c>next</c> is no longer included in the response, no further results are remaining.
+    /// **Note**: The first time you call this endpoint, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no further results are remaining.
     /// </summary>
     /// <example><code>
     /// await client.Connections.Clients.GetAsync(
diff --git a/src/Auth0.ManagementApi/Connections/Clients/IClientsClient.cs b/src/Auth0.ManagementApi/Connections/Clients/IClientsClient.cs
index 3a59cdd1e..08ffcb5c2 100644
--- a/src/Auth0.ManagementApi/Connections/Clients/IClientsClient.cs
+++ b/src/Auth0.ManagementApi/Connections/Clients/IClientsClient.cs
@@ -6,9 +6,9 @@ namespace Auth0.ManagementApi.Connections;
 public partial interface IClientsClient
 {
     /// <summary>
-    /// Retrieve all clients that have the specified <see href="https://auth0.com/docs/authenticate/identity-providers">connection</see> enabled.
+    /// Retrieve all clients that have the specified [connection](https://auth0.com/docs/authenticate/identity-providers) enabled.
     ///
-    /// <b>Note</b>: The first time you call this endpoint, omit the <c>from</c> parameter. If there are more results, a <c>next</c> value is included in the response. You can use this for subsequent API calls. When <c>next</c> is no longer included in the response, no further results are remaining.
+    /// **Note**: The first time you call this endpoint, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no further results are remaining.
     /// </summary>
     Task<Pager<ConnectionEnabledClient>> GetAsync(
         string id,
diff --git a/src/Auth0.ManagementApi/Connections/ConnectionsClient.cs b/src/Auth0.ManagementApi/Connections/ConnectionsClient.cs
index 372a2b2ad..b699af58f 100644
--- a/src/Auth0.ManagementApi/Connections/ConnectionsClient.cs
+++ b/src/Auth0.ManagementApi/Connections/ConnectionsClient.cs
@@ -29,25 +29,23 @@ internal ConnectionsClient(RawClient client)
     public Auth0.ManagementApi.Connections.IUsersClient Users { get; }
 
     /// <summary>
-    /// Retrieves detailed list of all <see href="https://auth0.com/docs/authenticate/identity-providers">connections</see> that match the specified strategy. If no strategy is provided, all connections within your tenant are retrieved. This action can accept a list of fields to include or exclude from the resulting list of connections.
+    /// Retrieves detailed list of all [connections](https://auth0.com/docs/authenticate/identity-providers) that match the specified strategy. If no strategy is provided, all connections within your tenant are retrieved. This action can accept a list of fields to include or exclude from the resulting list of connections.
     ///
     /// This endpoint supports two types of pagination:
-    /// <list type="bullet">
-    /// <item><description>Offset pagination</description></item>
-    /// <item><description>Checkpoint pagination</description></item>
-    /// </list>
+    ///
+    /// - Offset pagination
+    /// - Checkpoint pagination
     ///
     /// Checkpoint pagination must be used if you need to retrieve more than 1000 connections.
     ///
-    /// <para>Checkpoint Pagination</para>
+    /// **Checkpoint Pagination**
     ///
     /// To search by checkpoint, use the following parameters:
-    /// <list type="bullet">
-    /// <item><description><c>from</c>: Optional id from which to start selection.</description></item>
-    /// <item><description><c>take</c>: The total amount of entries to retrieve when using the from parameter. Defaults to 50.</description></item>
-    /// </list>
     ///
-    /// <b>Note</b>: The first time you call this endpoint using checkpoint pagination, omit the <c>from</c> parameter. If there are more results, a <c>next</c> value is included in the response. You can use this for subsequent API calls. When <c>next</c> is no longer included in the response, no pages are remaining.
+    /// - `from`: Optional id from which to start selection.
+    /// - `take`: The total amount of entries to retrieve when using the from parameter. Defaults to 50.
+    ///
+    /// **Note**: The first time you call this endpoint using checkpoint pagination, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no pages are remaining.
     /// </summary>
     private WithRawResponseTask<ListConnectionsCheckpointPaginatedResponseContent> ListInternalAsync(
         ListConnectionsQueryParameters request,
@@ -440,25 +438,23 @@ private async Task<WithRawResponse<UpdateConnectionResponseContent>> UpdateAsync
     }
 
     /// <summary>
-    /// Retrieves detailed list of all <see href="https://auth0.com/docs/authenticate/identity-providers">connections</see> that match the specified strategy. If no strategy is provided, all connections within your tenant are retrieved. This action can accept a list of fields to include or exclude from the resulting list of connections.
+    /// Retrieves detailed list of all [connections](https://auth0.com/docs/authenticate/identity-providers) that match the specified strategy. If no strategy is provided, all connections within your tenant are retrieved. This action can accept a list of fields to include or exclude from the resulting list of connections.
     ///
     /// This endpoint supports two types of pagination:
-    /// <list type="bullet">
-    /// <item><description>Offset pagination</description></item>
-    /// <item><description>Checkpoint pagination</description></item>
-    /// </list>
+    ///
+    /// - Offset pagination
+    /// - Checkpoint pagination
     ///
     /// Checkpoint pagination must be used if you need to retrieve more than 1000 connections.
     ///
-    /// <para>Checkpoint Pagination</para>
+    /// **Checkpoint Pagination**
     ///
     /// To search by checkpoint, use the following parameters:
-    /// <list type="bullet">
-    /// <item><description><c>from</c>: Optional id from which to start selection.</description></item>
-    /// <item><description><c>take</c>: The total amount of entries to retrieve when using the from parameter. Defaults to 50.</description></item>
-    /// </list>
     ///
-    /// <b>Note</b>: The first time you call this endpoint using checkpoint pagination, omit the <c>from</c> parameter. If there are more results, a <c>next</c> value is included in the response. You can use this for subsequent API calls. When <c>next</c> is no longer included in the response, no pages are remaining.
+    /// - `from`: Optional id from which to start selection.
+    /// - `take`: The total amount of entries to retrieve when using the from parameter. Defaults to 50.
+    ///
+    /// **Note**: The first time you call this endpoint using checkpoint pagination, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no pages are remaining.
     /// </summary>
     /// <example><code>
     /// await client.Connections.ListAsync(
@@ -508,9 +504,9 @@ await ListInternalAsync(request, options, cancellationToken).WithRawResponse(),
     }
 
     /// <summary>
-    /// Creates a new connection according to the JSON object received in <c>body</c>.
+    /// Creates a new connection according to the JSON object received in `body`.
     ///
-    /// <b>Note:</b> If a connection with the same name was recently deleted and had a large number of associated users, the deletion may still be processing. Creating a new connection with that name before the deletion completes may fail or produce unexpected results.
+    /// **Note:** If a connection with the same name was recently deleted and had a large number of associated users, the deletion may still be processing. Creating a new connection with that name before the deletion completes may fail or produce unexpected results.
     /// </summary>
     /// <example><code>
     /// await client.Connections.CreateAsync(
@@ -533,7 +529,7 @@ public WithRawResponseTask<CreateConnectionResponseContent> CreateAsync(
     }
 
     /// <summary>
-    /// Retrieve details for a specified <see href="https://auth0.com/docs/authenticate/identity-providers">connection</see> along with options that can be used for identity provider configuration.
+    /// Retrieve details for a specified [connection](https://auth0.com/docs/authenticate/identity-providers) along with options that can be used for identity provider configuration.
     /// </summary>
     /// <example><code>
     /// await client.Connections.GetAsync(
@@ -554,9 +550,9 @@ public WithRawResponseTask<GetConnectionResponseContent> GetAsync(
     }
 
     /// <summary>
-    /// Removes a specific <see href="https://auth0.com/docs/authenticate/identity-providers">connection</see> from your tenant. This action cannot be undone. Once removed, users can no longer use this connection to authenticate.
+    /// Removes a specific [connection](https://auth0.com/docs/authenticate/identity-providers) from your tenant. This action cannot be undone. Once removed, users can no longer use this connection to authenticate.
     ///
-    /// <b>Note:</b> If your connection has a large amount of users associated with it, please be aware that this operation can be long running after the response is returned and may impact concurrent <see href="https://auth0.com/docs/api/management/v2/connections/post-connections">create connection</see> requests, if they use an identical connection name.
+    /// **Note:** If your connection has a large amount of users associated with it, please be aware that this operation can be long running after the response is returned and may impact concurrent [create connection](https://auth0.com/docs/api/management/v2/connections/post-connections) requests, if they use an identical connection name.
     /// </summary>
     /// <example><code>
     /// await client.Connections.DeleteAsync("id");
@@ -620,9 +616,9 @@ public async Task DeleteAsync(
     }
 
     /// <summary>
-    /// Update details for a specific <see href="https://auth0.com/docs/authenticate/identity-providers">connection</see>, including option properties for identity provider configuration.
+    /// Update details for a specific [connection](https://auth0.com/docs/authenticate/identity-providers), including option properties for identity provider configuration.
     ///
-    /// <b>Note</b>: If you use the <c>options</c> parameter, the entire <c>options</c> object is overriden. To avoid partial data or other issues, ensure all parameters are present when using this option.
+    /// **Note**: If you use the `options` parameter, the entire `options` object is overridden. To avoid partial data or other issues, ensure all parameters are present when using this option.
     /// </summary>
     /// <example><code>
     /// await client.Connections.UpdateAsync("id", new UpdateConnectionRequestContent());
@@ -640,7 +636,7 @@ public WithRawResponseTask<UpdateConnectionResponseContent> UpdateAsync(
     }
 
     /// <summary>
-    /// Retrieves the status of an ad/ldap connection referenced by its <c>ID</c>. <c>200 OK</c> http status code response is returned  when the connection is online, otherwise a <c>404</c> status code is returned along with an error message
+    /// Retrieves the status of an ad/ldap connection referenced by its `ID`. `200 OK` http status code response is returned  when the connection is online, otherwise a `404` status code is returned along with an error message
     /// </summary>
     /// <example><code>
     /// await client.Connections.CheckStatusAsync("id");
diff --git a/src/Auth0.ManagementApi/Connections/IConnectionsClient.cs b/src/Auth0.ManagementApi/Connections/IConnectionsClient.cs
index 652b4f522..e656013a9 100644
--- a/src/Auth0.ManagementApi/Connections/IConnectionsClient.cs
+++ b/src/Auth0.ManagementApi/Connections/IConnectionsClient.cs
@@ -12,25 +12,23 @@ public partial interface IConnectionsClient
     public Auth0.ManagementApi.Connections.IUsersClient Users { get; }
 
     /// <summary>
-    /// Retrieves detailed list of all <see href="https://auth0.com/docs/authenticate/identity-providers">connections</see> that match the specified strategy. If no strategy is provided, all connections within your tenant are retrieved. This action can accept a list of fields to include or exclude from the resulting list of connections.
+    /// Retrieves detailed list of all [connections](https://auth0.com/docs/authenticate/identity-providers) that match the specified strategy. If no strategy is provided, all connections within your tenant are retrieved. This action can accept a list of fields to include or exclude from the resulting list of connections.
     ///
     /// This endpoint supports two types of pagination:
-    /// <list type="bullet">
-    /// <item><description>Offset pagination</description></item>
-    /// <item><description>Checkpoint pagination</description></item>
-    /// </list>
+    ///
+    /// - Offset pagination
+    /// - Checkpoint pagination
     ///
     /// Checkpoint pagination must be used if you need to retrieve more than 1000 connections.
     ///
-    /// <para>Checkpoint Pagination</para>
+    /// **Checkpoint Pagination**
     ///
     /// To search by checkpoint, use the following parameters:
-    /// <list type="bullet">
-    /// <item><description><c>from</c>: Optional id from which to start selection.</description></item>
-    /// <item><description><c>take</c>: The total amount of entries to retrieve when using the from parameter. Defaults to 50.</description></item>
-    /// </list>
     ///
-    /// <b>Note</b>: The first time you call this endpoint using checkpoint pagination, omit the <c>from</c> parameter. If there are more results, a <c>next</c> value is included in the response. You can use this for subsequent API calls. When <c>next</c> is no longer included in the response, no pages are remaining.
+    /// - `from`: Optional id from which to start selection.
+    /// - `take`: The total amount of entries to retrieve when using the from parameter. Defaults to 50.
+    ///
+    /// **Note**: The first time you call this endpoint using checkpoint pagination, omit the `from` parameter. If there are more results, a `next` value is included in the response. You can use this for subsequent API calls. When `next` is no longer included in the response, no pages are remaining.
     /// </summary>
     Task<Pager<ConnectionForList>> ListAsync(
         ListConnectionsQueryParameters request,
@@ -39,9 +37,9 @@ Task<Pager<ConnectionForList>> ListAsync(
     );
 
     /// <summary>
-    /// Creates a new connection according to the JSON object received in <c>body</c>.
+    /// Creates a new connection according to the JSON object received in `body`.
     ///
-    /// <b>Note:</b> If a connection with the same name was recently deleted and had a large number of associated users, the deletion may still be processing. Creating a new connection with that name before the deletion completes may fail or produce unexpected results.
+    /// **Note:** If a connection with the same name was recently deleted and had a large number of associated users, the deletion may still be processing. Creating a new connection with that name before the deletion completes may fail or produce unexpected results.
     /// </summary>
     WithRawResponseTask<CreateConnectionResponseContent> CreateAsync(
         CreateConnectionRequestContent request,
@@ -50,7 +48,7 @@ WithRawResponseTask<CreateConnectionResponseContent> CreateAsync(
     );
 
     /// <summary>
-    /// Retrieve details for a specified <see href="https://auth0.com/docs/authenticate/identity-providers">connection</see> along with options that can be used for identity provider configuration.
+    /// Retrieve details for a specified [connection](https://auth0.com/docs/authenticate/identity-providers) along with options that can be used for identity provider configuration.
     /// </summary>
     WithRawResponseTask<GetConnectionResponseContent> GetAsync(
         string id,
@@ -60,9 +58,9 @@ WithRawResponseTask<GetConnectionResponseContent> GetAsync(
     );
 
     /// <summary>
-    /// Removes a specific <see href="https://auth0.com/docs/authenticate/identity-providers">connection</see> from your tenant. This action cannot be undone. Once removed, users can no longer use this connection to authenticate.
+    /// Removes a specific [connection](https://auth0.com/docs/authenticate/identity-providers) from your tenant. This action cannot be undone. Once removed, users can no longer use this connection to authenticate.
     ///
-    /// <b>Note:</b> If your connection has a large amount of users associated with it, please be aware that this operation can be long running after the response is returned and may impact concurrent <see href="https://auth0.com/docs/api/management/v2/connections/post-connections">create connection</see> requests, if they use an identical connection name.
+    /// **Note:** If your connection has a large amount of users associated with it, please be aware that this operation can be long running after the response is returned and may impact concurrent [create connection](https://auth0.com/docs/api/management/v2/connections/post-connections) requests, if they use an identical connection name.
     /// </summary>
     Task DeleteAsync(
         string id,
@@ -71,9 +69,9 @@ Task DeleteAsync(
     );
 
     /// <summary>
-    /// Update details for a specific <see href="https://auth0.com/docs/authenticate/identity-providers">connection</see>, including option properties for identity provider configuration.
+    /// Update details for a specific [connection](https://auth0.com/docs/authenticate/identity-providers), including option properties for identity provider configuration.
     ///
-    /// <b>Note</b>: If you use the <c>options</c> parameter, the entire <c>options</c> object is overriden. To avoid partial data or other issues, ensure all parameters are present when using this option.
+    /// **Note**: If you use the `options` parameter, the entire `options` object is overridden. To avoid partial data or other issues, ensure all parameters are present when using this option.
     /// </summary>
     WithRawResponseTask<UpdateConnectionResponseContent> UpdateAsync(
         string id,
@@ -83,7 +81,7 @@ WithRawResponseTask<UpdateConnectionResponseContent> UpdateAsync(
     );
 
     /// <summary>
-    /// Retrieves the status of an ad/ldap connection referenced by its <c>ID</c>. <c>200 OK</c> http status code response is returned  when the connection is online, otherwise a <c>404</c> status code is returned along with an error message
+    /// Retrieves the status of an ad/ldap connection referenced by its `ID`. `200 OK` http status code response is returned  when the connection is online, otherwise a `404` status code is returned along with an error message
     /// </summary>
     Task CheckStatusAsync(
         string id,
diff --git a/src/Auth0.ManagementApi/Core/Public/Version.cs b/src/Auth0.ManagementApi/Core/Public/Version.cs
index bf9617958..1e14b8690 100644
--- a/src/Auth0.ManagementApi/Core/Public/Version.cs
+++ b/src/Auth0.ManagementApi/Core/Public/Version.cs
@@ -3,5 +3,5 @@ namespace Auth0.ManagementApi;
 [Serializable]
 internal class Version
 {
-    public const string Current = "7.45.1";
+    public const string Current = "7.46.0";
 }
diff --git a/src/Auth0.ManagementApi/Core/RawClient.cs b/src/Auth0.ManagementApi/Core/RawClient.cs
index 57d9b8ca0..13c1758e0 100644
--- a/src/Auth0.ManagementApi/Core/RawClient.cs
+++ b/src/Auth0.ManagementApi/Core/RawClient.cs
@@ -174,7 +174,8 @@ CancellationToken cancellationToken
     private static bool ShouldRetry(HttpResponseMessage response)
     {
         var statusCode = (int)response.StatusCode;
-        return statusCode is 408 or 429 or >= 500;
+
+        return statusCode is 408 or 429 or (>= 500);
     }
 
     private static int AddPositiveJitter(int delayMs)
diff --git a/src/Auth0.ManagementApi/CustomDomains/CustomDomainsClient.cs b/src/Auth0.ManagementApi/CustomDomains/CustomDomainsClient.cs
index 9ea40b424..b2ded3280 100644
--- a/src/Auth0.ManagementApi/CustomDomains/CustomDomainsClient.cs
+++ b/src/Auth0.ManagementApi/CustomDomains/CustomDomainsClient.cs
@@ -720,7 +720,7 @@ private async Task<WithRawResponse<VerifyCustomDomainResponseContent>> VerifyAsy
     }
 
     /// <summary>
-    /// Retrieve details on <see href="https://auth0.com/docs/custom-domains">custom domains</see>.
+    /// Retrieve details on [custom domains](https://auth0.com/docs/custom-domains).
     /// </summary>
     /// <example><code>
     /// await client.CustomDomains.ListAsync(
@@ -755,7 +755,6 @@ public WithRawResponseTask<IEnumerable<CustomDomain>> ListAsync(
     /// - custom_client_ip_header
     /// - tls_policy
     ///
-    ///
     /// TLS Policies:
     ///
     /// - recommended - for modern usage this includes TLS 1.2 only
@@ -907,23 +906,31 @@ public async Task DeleteAsync(
     /// - custom_client_ip_header
     /// - tls_policy
     ///
-    /// <para>Updating CUSTOM_CLIENT_IP_HEADER for a custom domain</para>To update the <c>custom_client_ip_header</c> for a domain, the body to
+    /// **Updating CUSTOM_CLIENT_IP_HEADER for a custom domain**
+    ///
+    /// To update the `custom_client_ip_header` for a domain, the body to
     /// send should be:
-    /// <code>{ "custom_client_ip_header": "cf-connecting-ip" }</code>
     ///
-    /// <para>Updating TLS_POLICY for a custom domain</para>To update the <c>tls_policy</c> for a domain, the body to send should be:
-    /// <code>{ "tls_policy": "recommended" }</code>
+    /// ```json
+    /// { "custom_client_ip_header": "cf-connecting-ip" }
+    /// ```
+    ///
+    /// **Updating TLS_POLICY for a custom domain**
     ///
+    /// To update the `tls_policy` for a domain, the body to send should be:
+    ///
+    /// ```json
+    /// { "tls_policy": "recommended" }
+    /// ```
     ///
     /// TLS Policies:
     ///
     /// - recommended - for modern usage this includes TLS 1.2 only
     ///
-    ///
     /// Some considerations:
     ///
     /// - The TLS ciphers and protocols available in each TLS policy follow industry recommendations, and may be updated occasionally.
-    /// - The <c>compatible</c> TLS policy is no longer supported.
+    /// - The `compatible` TLS policy is no longer supported.
     /// </summary>
     /// <example><code>
     /// await client.CustomDomains.UpdateAsync("id", new UpdateCustomDomainRequestContent());
@@ -960,12 +967,12 @@ public WithRawResponseTask<TestCustomDomainResponseContent> TestAsync(
     /// <summary>
     /// Run the verification process on a custom domain.
     ///
-    /// Note: Check the <c>status</c> field to see its verification status. Once verification is complete, it may take up to 10 minutes before the custom domain can start accepting requests.
+    /// Note: Check the `status` field to see its verification status. Once verification is complete, it may take up to 10 minutes before the custom domain can start accepting requests.
     ///
-    /// For <c>self_managed_certs</c>, when the custom domain is verified for the first time, the response will also include the <c>cname_api_key</c> which you will need to configure your proxy. This key must be kept secret, and is used to validate the proxy requests.
+    /// For `self_managed_certs`, when the custom domain is verified for the first time, the response will also include the `cname_api_key` which you will need to configure your proxy. This key must be kept secret, and is used to validate the proxy requests.
     ///
-    /// <see href="https://auth0.com/docs/custom-domains#step-2-verify-ownership">Learn more</see> about verifying custom domains that use Auth0 Managed certificates.
-    /// <see href="https://auth0.com/docs/custom-domains/self-managed-certificates#step-2-verify-ownership">Learn more</see> about verifying custom domains that use Self Managed certificates.
+    /// [Learn more](https://auth0.com/docs/custom-domains#step-2-verify-ownership) about verifying custom domains that use Auth0 Managed certificates.
+    /// [Learn more](https://auth0.com/docs/custom-domains/self-managed-certificates#step-2-verify-ownership) about verifying custom domains that use Self Managed certificates.
     /// </summary>
     /// <example><code>
     /// await client.CustomDomains.VerifyAsync("id");
diff --git a/src/Auth0.ManagementApi/CustomDomains/ICustomDomainsClient.cs b/src/Auth0.ManagementApi/CustomDomains/ICustomDomainsClient.cs
index 2f9022ddc..4e38ef4ac 100644
--- a/src/Auth0.ManagementApi/CustomDomains/ICustomDomainsClient.cs
+++ b/src/Auth0.ManagementApi/CustomDomains/ICustomDomainsClient.cs
@@ -3,7 +3,7 @@ namespace Auth0.ManagementApi;
 public partial interface ICustomDomainsClient
 {
     /// <summary>
-    /// Retrieve details on <see href="https://auth0.com/docs/custom-domains">custom domains</see>.
+    /// Retrieve details on [custom domains](https://auth0.com/docs/custom-domains).
     /// </summary>
     WithRawResponseTask<IEnumerable<CustomDomain>> ListAsync(
         ListCustomDomainsRequestParameters request,
@@ -22,7 +22,6 @@ WithRawResponseTask<IEnumerable<CustomDomain>> ListAsync(
     /// - custom_client_ip_header
     /// - tls_policy
     ///
-    ///
     /// TLS Policies:
     ///
     /// - recommended - for modern usage this includes TLS 1.2 only
@@ -76,23 +75,31 @@ Task DeleteAsync(
     /// - custom_client_ip_header
     /// - tls_policy
     ///
-    /// <para>Updating CUSTOM_CLIENT_IP_HEADER for a custom domain</para>To update the <c>custom_client_ip_header</c> for a domain, the body to
+    /// **Updating CUSTOM_CLIENT_IP_HEADER for a custom domain**
+    ///
+    /// To update the `custom_client_ip_header` for a domain, the body to
     /// send should be:
-    /// <code>{ "custom_client_ip_header": "cf-connecting-ip" }</code>
     ///
-    /// <para>Updating TLS_POLICY for a custom domain</para>To update the <c>tls_policy</c> for a domain, the body to send should be:
-    /// <code>{ "tls_policy": "recommended" }</code>
+    /// ```json
+    /// { "custom_client_ip_header": "cf-connecting-ip" }
+    /// ```
+    ///
+    /// **Updating TLS_POLICY for a custom domain**
     ///
+    /// To update the `tls_policy` for a domain, the body to send should be:
+    ///
+    /// ```json
+    /// { "tls_policy": "recommended" }
+    /// ```
     ///
     /// TLS Policies:
     ///
     /// - recommended - for modern usage this includes TLS 1.2 only
     ///
-    ///
     /// Some considerations:
     ///
     /// - The TLS ciphers and protocols available in each TLS policy follow industry recommendations, and may be updated occasionally.
-    /// - The <c>compatible</c> TLS policy is no longer supported.
+    /// - The `compatible` TLS policy is no longer supported.
     /// </summary>
     WithRawResponseTask<UpdateCustomDomainResponseContent> UpdateAsync(
         string id,
@@ -113,12 +120,12 @@ WithRawResponseTask<TestCustomDomainResponseContent> TestAsync(
     /// <summary>
     /// Run the verification process on a custom domain.
     ///
-    /// Note: Check the <c>status</c> field to see its verification status. Once verification is complete, it may take up to 10 minutes before the custom domain can start accepting requests.
+    /// Note: Check the `status` field to see its verification status. Once verification is complete, it may take up to 10 minutes before the custom domain can start accepting requests.
     ///
-    /// For <c>self_managed_certs</c>, when the custom domain is verified for the first time, the response will also include the <c>cname_api_key</c> which you will need to configure your proxy. This key must be kept secret, and is used to validate the proxy requests.
+    /// For `self_managed_certs`, when the custom domain is verified for the first time, the response will also include the `cname_api_key` which you will need to configure your proxy. This key must be kept secret, and is used to validate the proxy requests.
     ///
-    /// <see href="https://auth0.com/docs/custom-domains#step-2-verify-ownership">Learn more</see> about verifying custom domains that use Auth0 Managed certificates.
-    /// <see href="https://auth0.com/docs/custom-domains/self-managed-certificates#step-2-verify-ownership">Learn more</see> about verifying custom domains that use Self Managed certificates.
+    /// [Learn more](https://auth0.com/docs/custom-domains#step-2-verify-ownership) about verifying custom domains that use Auth0 Managed certificates.
+    /// [Learn more](https://auth0.com/docs/custom-domains/self-managed-certificates#step-2-verify-ownership) about verifying custom domains that use Self Managed certificates.
     /// </summary>
     WithRawResponseTask<VerifyCustomDomainResponseContent> VerifyAsync(
         string id,
diff --git a/src/Auth0.ManagementApi/Hooks/HooksClient.cs b/src/Auth0.ManagementApi/Hooks/HooksClient.cs
index 8d6171437..9de44ff2d 100644
--- a/src/Auth0.ManagementApi/Hooks/HooksClient.cs
+++ b/src/Auth0.ManagementApi/Hooks/HooksClient.cs
@@ -17,7 +17,7 @@ internal HooksClient(RawClient client)
     public ISecretsClient Secrets { get; }
 
     /// <summary>
-    /// Retrieve all <see href="https://auth0.com/docs/hooks">hooks</see>. Accepts a list of fields to include or exclude in the result.
+    /// Retrieve all [hooks](https://auth0.com/docs/hooks). Accepts a list of fields to include or exclude in the result.
     /// </summary>
     private WithRawResponseTask<ListHooksOffsetPaginatedResponseContent> ListInternalAsync(
         ListHooksRequestParameters request,
@@ -401,7 +401,7 @@ private async Task<WithRawResponse<UpdateHookResponseContent>> UpdateAsyncCore(
     }
 
     /// <summary>
-    /// Retrieve all <see href="https://auth0.com/docs/hooks">hooks</see>. Accepts a list of fields to include or exclude in the result.
+    /// Retrieve all [hooks](https://auth0.com/docs/hooks). Accepts a list of fields to include or exclude in the result.
     /// </summary>
     /// <example><code>
     /// await client.Hooks.ListAsync(
@@ -475,7 +475,7 @@ public WithRawResponseTask<CreateHookResponseContent> CreateAsync(
     }
 
     /// <summary>
-    /// Retrieve <see href="https://auth0.com/docs/hooks">a hook</see> by its ID. Accepts a list of fields to include in the result.
+    /// Retrieve [a hook](https://auth0.com/docs/hooks) by its ID. Accepts a list of fields to include in the result.
     /// </summary>
     /// <example><code>
     /// await client.Hooks.GetAsync("id", new GetHookRequestParameters { Fields = "fields" });
diff --git a/src/Auth0.ManagementApi/Hooks/IHooksClient.cs b/src/Auth0.ManagementApi/Hooks/IHooksClient.cs
index 4e844beba..70a4ac086 100644
--- a/src/Auth0.ManagementApi/Hooks/IHooksClient.cs
+++ b/src/Auth0.ManagementApi/Hooks/IHooksClient.cs
@@ -8,7 +8,7 @@ public partial interface IHooksClient
     public ISecretsClient Secrets { get; }
 
     /// <summary>
-    /// Retrieve all <see href="https://auth0.com/docs/hooks">hooks</see>. Accepts a list of fields to include or exclude in the result.
+    /// Retrieve all [hooks](https://auth0.com/docs/hooks). Accepts a list of fields to include or exclude in the result.
     /// </summary>
     Task<Pager<Hook>> ListAsync(
         ListHooksRequestParameters request,
@@ -26,7 +26,7 @@ WithRawResponseTask<CreateHookResponseContent> CreateAsync(
     );
 
     /// <summary>
-    /// Retrieve <see href="https://auth0.com/docs/hooks">a hook</see> by its ID. Accepts a list of fields to include in the result.
+    /// Retrieve [a hook](https://auth0.com/docs/hooks) by its ID. Accepts a list of fields to include in the result.
     /// </summary>
     WithRawResponseTask<GetHookResponseContent> GetAsync(
         string id,
diff --git a/src/Auth0.ManagementApi/Prompts/Rendering/IRenderingClient.cs b/src/Auth0.ManagementApi/Prompts/Rendering/IRenderingClient.cs
index af70225cc..440e1812e 100644
--- a/src/Auth0.ManagementApi/Prompts/Rendering/IRenderingClient.cs
+++ b/src/Auth0.ManagementApi/Prompts/Rendering/IRenderingClient.cs
@@ -15,7 +15,7 @@ Task<Pager<ListAculsResponseContentItem>> ListAsync(
     );
 
     /// <summary>
-    /// Learn more about <see href="https://auth0.com/docs/customize/login-pages/advanced-customizations/getting-started/configure-acul-screens">configuring render settings</see> for advanced customization.
+    /// Learn more about [configuring render settings](https://auth0.com/docs/customize/login-pages/advanced-customizations/getting-started/configure-acul-screens) for advanced customization.
     /// </summary>
     WithRawResponseTask<BulkUpdateAculResponseContent> BulkUpdateAsync(
         BulkUpdateAculRequestContent request,
@@ -34,7 +34,7 @@ WithRawResponseTask<GetAculResponseContent> GetAsync(
     );
 
     /// <summary>
-    /// Learn more about <see href="https://auth0.com/docs/customize/login-pages/advanced-customizations/getting-started/configure-acul-screens">configuring render settings</see> for advanced customization.
+    /// Learn more about [configuring render settings](https://auth0.com/docs/customize/login-pages/advanced-customizations/getting-started/configure-acul-screens) for advanced customization.
     /// </summary>
     WithRawResponseTask<UpdateAculResponseContent> UpdateAsync(
         PromptGroupNameEnum prompt,
diff --git a/src/Auth0.ManagementApi/Prompts/Rendering/RenderingClient.cs b/src/Auth0.ManagementApi/Prompts/Rendering/RenderingClient.cs
index 15dad4607..4d723ee55 100644
--- a/src/Auth0.ManagementApi/Prompts/Rendering/RenderingClient.cs
+++ b/src/Auth0.ManagementApi/Prompts/Rendering/RenderingClient.cs
@@ -464,7 +464,7 @@ await ListInternalAsync(request, options, cancellationToken).WithRawResponse(),
     }
 
     /// <summary>
-    /// Learn more about <see href="https://auth0.com/docs/customize/login-pages/advanced-customizations/getting-started/configure-acul-screens">configuring render settings</see> for advanced customization.
+    /// Learn more about [configuring render settings](https://auth0.com/docs/customize/login-pages/advanced-customizations/getting-started/configure-acul-screens) for advanced customization.
     /// </summary>
     /// <example><code>
     /// await client.Prompts.Rendering.BulkUpdateAsync(
@@ -511,7 +511,7 @@ public WithRawResponseTask<GetAculResponseContent> GetAsync(
     }
 
     /// <summary>
-    /// Learn more about <see href="https://auth0.com/docs/customize/login-pages/advanced-customizations/getting-started/configure-acul-screens">configuring render settings</see> for advanced customization.
+    /// Learn more about [configuring render settings](https://auth0.com/docs/customize/login-pages/advanced-customizations/getting-started/configure-acul-screens) for advanced customization.
     /// </summary>
     /// <example><code>
     /// await client.Prompts.Rendering.UpdateAsync(
diff --git a/src/Auth0.ManagementApi/Rules/IRulesClient.cs b/src/Auth0.ManagementApi/Rules/IRulesClient.cs
index 58e080a36..bc632bb69 100644
--- a/src/Auth0.ManagementApi/Rules/IRulesClient.cs
+++ b/src/Auth0.ManagementApi/Rules/IRulesClient.cs
@@ -5,7 +5,7 @@ namespace Auth0.ManagementApi;
 public partial interface IRulesClient
 {
     /// <summary>
-    /// Retrieve a filtered list of <see href="https://auth0.com/docs/rules">rules</see>. Accepts a list of fields to include or exclude.
+    /// Retrieve a filtered list of [rules](https://auth0.com/docs/rules). Accepts a list of fields to include or exclude.
     /// </summary>
     Task<Pager<Rule>> ListAsync(
         ListRulesRequestParameters request,
@@ -14,9 +14,9 @@ Task<Pager<Rule>> ListAsync(
     );
 
     /// <summary>
-    /// Create a <see href="https://auth0.com/docs/rules#create-a-new-rule-using-the-management-api">new rule</see>.
+    /// Create a [new rule](https://auth0.com/docs/rules#create-a-new-rule-using-the-management-api).
     ///
-    /// Note: Changing a rule's stage of execution from the default <c>login_success</c> can change the rule's function signature to have user omitted.
+    /// Note: Changing a rule's stage of execution from the default `login_success` can change the rule's function signature to have user omitted.
     /// </summary>
     WithRawResponseTask<CreateRuleResponseContent> CreateAsync(
         CreateRuleRequestContent request,
@@ -25,7 +25,7 @@ WithRawResponseTask<CreateRuleResponseContent> CreateAsync(
     );
 
     /// <summary>
-    /// Retrieve <see href="https://auth0.com/docs/rules">rule</see> details. Accepts a list of fields to include or exclude in the result.
+    /// Retrieve [rule](https://auth0.com/docs/rules) details. Accepts a list of fields to include or exclude in the result.
     /// </summary>
     WithRawResponseTask<GetRuleResponseContent> GetAsync(
         string id,
diff --git a/src/Auth0.ManagementApi/Rules/RulesClient.cs b/src/Auth0.ManagementApi/Rules/RulesClient.cs
index 9c1b6a76e..74474a686 100644
--- a/src/Auth0.ManagementApi/Rules/RulesClient.cs
+++ b/src/Auth0.ManagementApi/Rules/RulesClient.cs
@@ -13,7 +13,7 @@ internal RulesClient(RawClient client)
     }
 
     /// <summary>
-    /// Retrieve a filtered list of <see href="https://auth0.com/docs/rules">rules</see>. Accepts a list of fields to include or exclude.
+    /// Retrieve a filtered list of [rules](https://auth0.com/docs/rules). Accepts a list of fields to include or exclude.
     /// </summary>
     private WithRawResponseTask<ListRulesOffsetPaginatedResponseContent> ListInternalAsync(
         ListRulesRequestParameters request,
@@ -404,7 +404,7 @@ private async Task<WithRawResponse<UpdateRuleResponseContent>> UpdateAsyncCore(
     }
 
     /// <summary>
-    /// Retrieve a filtered list of <see href="https://auth0.com/docs/rules">rules</see>. Accepts a list of fields to include or exclude.
+    /// Retrieve a filtered list of [rules](https://auth0.com/docs/rules). Accepts a list of fields to include or exclude.
     /// </summary>
     /// <example><code>
     /// await client.Rules.ListAsync(
@@ -454,9 +454,9 @@ await ListInternalAsync(request, options, cancellationToken).WithRawResponse(),
     }
 
     /// <summary>
-    /// Create a <see href="https://auth0.com/docs/rules#create-a-new-rule-using-the-management-api">new rule</see>.
+    /// Create a [new rule](https://auth0.com/docs/rules#create-a-new-rule-using-the-management-api).
     ///
-    /// Note: Changing a rule's stage of execution from the default <c>login_success</c> can change the rule's function signature to have user omitted.
+    /// Note: Changing a rule's stage of execution from the default `login_success` can change the rule's function signature to have user omitted.
     /// </summary>
     /// <example><code>
     /// await client.Rules.CreateAsync(new CreateRuleRequestContent { Name = "name", Script = "script" });
@@ -473,7 +473,7 @@ public WithRawResponseTask<CreateRuleResponseContent> CreateAsync(
     }
 
     /// <summary>
-    /// Retrieve <see href="https://auth0.com/docs/rules">rule</see> details. Accepts a list of fields to include or exclude in the result.
+    /// Retrieve [rule](https://auth0.com/docs/rules) details. Accepts a list of fields to include or exclude in the result.
     /// </summary>
     /// <example><code>
     /// await client.Rules.GetAsync(
diff --git a/src/Auth0.ManagementApi/Types/BrandingPageBackground.cs b/src/Auth0.ManagementApi/Types/BrandingPageBackground.cs
index 0407b4422..d12ec3265 100644
--- a/src/Auth0.ManagementApi/Types/BrandingPageBackground.cs
+++ b/src/Auth0.ManagementApi/Types/BrandingPageBackground.cs
@@ -9,16 +9,16 @@ namespace Auth0.ManagementApi;
 
 /// <summary>
 /// Page Background Color or Gradient.
-/// Property contains either <c>null</c> to unset, a solid color as a string value <c>#FFFFFF</c>, or a gradient as an object.
+/// Property contains either `null` to unset, a solid color as a string value `#FFFFFF`, or a gradient as an object.
 ///
-/// <code>
+/// ```js
 /// {
 ///   type: 'linear-gradient',
 ///   start: '#FFFFFF',
 ///   end: '#000000',
 ///   angle_deg: 35
 /// }
-/// </code>
+/// ```
 /// </summary>
 [JsonConverter(typeof(BrandingPageBackground.JsonConverter))]
 [Serializable]
diff --git a/src/Auth0.ManagementApi/Types/ConnectionDpopSigningAlgEnum.cs b/src/Auth0.ManagementApi/Types/ConnectionDpopSigningAlgEnum.cs
index 7e0b06920..e939d5227 100644
--- a/src/Auth0.ManagementApi/Types/ConnectionDpopSigningAlgEnum.cs
+++ b/src/Auth0.ManagementApi/Types/ConnectionDpopSigningAlgEnum.cs
@@ -10,6 +10,10 @@ namespace Auth0.ManagementApi;
 {
     public static readonly ConnectionDpopSigningAlgEnum Es256 = new(Values.Es256);
 
+    public static readonly ConnectionDpopSigningAlgEnum Es384 = new(Values.Es384);
+
+    public static readonly ConnectionDpopSigningAlgEnum Es512 = new(Values.Es512);
+
     public static readonly ConnectionDpopSigningAlgEnum Ed25519 = new(Values.Ed25519);
 
     public ConnectionDpopSigningAlgEnum(string value)
@@ -111,6 +115,10 @@ public static class Values
     {
         public const string Es256 = "ES256";
 
+        public const string Es384 = "ES384";
+
+        public const string Es512 = "ES512";
+
         public const string Ed25519 = "Ed25519";
     }
 }
diff --git a/src/Auth0.ManagementApi/Types/FedCmLogin.cs b/src/Auth0.ManagementApi/Types/FedCmLogin.cs
new file mode 100644
index 000000000..d1956515d
--- /dev/null
+++ b/src/Auth0.ManagementApi/Types/FedCmLogin.cs
@@ -0,0 +1,32 @@
+using Auth0.ManagementApi.Core;
+using global::System.Text.Json;
+using global::System.Text.Json.Serialization;
+
+namespace Auth0.ManagementApi;
+
+/// <summary>
+/// Configure FedCM login settings for New Universal Login
+/// </summary>
+[Serializable]
+public record FedCmLogin : IJsonOnDeserialized
+{
+    [JsonExtensionData]
+    private readonly IDictionary<string, JsonElement> _extensionData =
+        new Dictionary<string, JsonElement>();
+
+    [Optional]
+    [JsonPropertyName("google")]
+    public FedCmLoginGoogle? Google { get; set; }
+
+    [JsonIgnore]
+    public ReadOnlyAdditionalProperties AdditionalProperties { get; private set; } = new();
+
+    void IJsonOnDeserialized.OnDeserialized() =>
+        AdditionalProperties.CopyFromExtensionData(_extensionData);
+
+    /// <inheritdoc />
+    public override string ToString()
+    {
+        return JsonUtils.Serialize(this);
+    }
+}
diff --git a/src/Auth0.ManagementApi/Types/FedCmLoginGoogle.cs b/src/Auth0.ManagementApi/Types/FedCmLoginGoogle.cs
new file mode 100644
index 000000000..6e8af61c0
--- /dev/null
+++ b/src/Auth0.ManagementApi/Types/FedCmLoginGoogle.cs
@@ -0,0 +1,35 @@
+using Auth0.ManagementApi.Core;
+using global::System.Text.Json;
+using global::System.Text.Json.Serialization;
+
+namespace Auth0.ManagementApi;
+
+/// <summary>
+/// Google FedCM configuration for this client
+/// </summary>
+[Serializable]
+public record FedCmLoginGoogle : IJsonOnDeserialized
+{
+    [JsonExtensionData]
+    private readonly IDictionary<string, JsonElement> _extensionData =
+        new Dictionary<string, JsonElement>();
+
+    /// <summary>
+    /// When true, shows the Google FedCM prompt on New Universal Login for this client
+    /// </summary>
+    [Optional]
+    [JsonPropertyName("is_enabled")]
+    public bool? IsEnabled { get; set; }
+
+    [JsonIgnore]
+    public ReadOnlyAdditionalProperties AdditionalProperties { get; private set; } = new();
+
+    void IJsonOnDeserialized.OnDeserialized() =>
+        AdditionalProperties.CopyFromExtensionData(_extensionData);
+
+    /// <inheritdoc />
+    public override string ToString()
+    {
+        return JsonUtils.Serialize(this);
+    }
+}
diff --git a/src/Auth0.ManagementApi/Types/UpdateBrandingPageBackground.cs b/src/Auth0.ManagementApi/Types/UpdateBrandingPageBackground.cs
index 97d36067b..e57fbc2a4 100644
--- a/src/Auth0.ManagementApi/Types/UpdateBrandingPageBackground.cs
+++ b/src/Auth0.ManagementApi/Types/UpdateBrandingPageBackground.cs
@@ -9,16 +9,16 @@ namespace Auth0.ManagementApi;
 
 /// <summary>
 /// Page Background Color or Gradient.
-/// Property contains either <c>null</c> to unset, a solid color as a string value <c>#FFFFFF</c>, or a gradient as an object.
+/// Property contains either `null` to unset, a solid color as a string value `#FFFFFF`, or a gradient as an object.
 ///
-/// <code>
+/// ```js
 /// {
 ///   type: 'linear-gradient',
 ///   start: '#FFFFFF',
 ///   end: '#000000',
 ///   angle_deg: 35
 /// }
-/// </code>
+/// ```
 /// </summary>
 [JsonConverter(typeof(UpdateBrandingPageBackground.JsonConverter))]
 [Serializable]
diff --git a/tests/Auth0.ManagementApi.Test/Auth0.ManagementApi.Test.csproj b/tests/Auth0.ManagementApi.Test/Auth0.ManagementApi.Test.csproj
index ab18c1f30..63c4abb22 100644
--- a/tests/Auth0.ManagementApi.Test/Auth0.ManagementApi.Test.csproj
+++ b/tests/Auth0.ManagementApi.Test/Auth0.ManagementApi.Test.csproj
@@ -25,7 +25,7 @@
       <PrivateAssets>all</PrivateAssets>
       <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
     </PackageReference>
-    <PackageReference Include="WireMock.Net" Version="2.6.0" />
+    <PackageReference Include="WireMock.Net" Version="2.7.0" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/Auth0.ManagementApi.Test/Utils/JsonAssert.cs b/tests/Auth0.ManagementApi.Test/Utils/JsonAssert.cs
index 68c6ed8ca..ace89981a 100644
--- a/tests/Auth0.ManagementApi.Test/Utils/JsonAssert.cs
+++ b/tests/Auth0.ManagementApi.Test/Utils/JsonAssert.cs
@@ -18,12 +18,16 @@ internal static void AreEqual(object actual, string expectedJson)
     }
 
     /// <summary>
-    /// Asserts that the given JSON string survives a deserialization/serialization round-trip
-    /// intact: deserializes to T then re-serializes and compares to the original JSON.
+    /// Asserts that the given JSON string survives a deserialization/serialization round-trip.
+    /// Deserializes to T, re-serializes to get the canonical form, then verifies a second
+    /// round-trip produces the same canonical form (idempotency). This accounts for serializer
+    /// options like WhenWritingNull that may normalize the output.
     /// </summary>
     internal static void Roundtrips<T>(string json)
     {
         var deserialized = JsonUtils.Deserialize<T>(json);
-        AreEqual(deserialized!, json);
+        var serialized = JsonUtils.Serialize(deserialized!);
+        var deserialized2 = JsonUtils.Deserialize<T>(serialized);
+        AreEqual(deserialized2!, serialized);
     }
 }