docs: Add clarifications on IAP CorsSettings behavior

Google APIs · copybara-github · commit 361c4941ccff · 2025-05-27T13:32:21.000-07:00
docs: Minor updates on GcipSettings description

PiperOrigin-RevId: 763926233
diff --git a/google/cloud/iap/v1/service.proto b/google/cloud/iap/v1/service.proto
@@ -448,14 +448,15 @@ message AccessSettings {
       [(google.api.field_behavior) = OPTIONAL];
 }
 
-// Allows customers to configure tenant_id for GCIP instance per-app.
+// Allows customers to configure tenant IDs for a Cloud Identity Platform (GCIP)
+// instance for each application.
 message GcipSettings {
-  // Optional. GCIP tenant ids that are linked to the IAP resource.
-  // tenant_ids could be a string beginning with a number character to indicate
-  // authenticating with GCIP tenant flow, or in the format of _<ProjectNumber>
-  // to indicate authenticating with GCIP agent flow.
-  // If agent flow is used, tenant_ids should only contain one single element,
-  // while for tenant flow, tenant_ids can contain multiple elements.
+  // Optional. GCIP tenant IDs that are linked to the IAP resource. `tenant_ids`
+  // could be a string beginning with a number character to indicate
+  // authenticating with GCIP tenant flow, or in the format of
+  // `_<ProjectNumber>` to indicate authenticating with GCIP agent flow. If
+  // agent flow is used, `tenant_ids` should only contain one single element,
+  // while for tenant flow, `tenant_ids` can contain multiple elements.
   repeated string tenant_ids = 1 [(google.api.field_behavior) = OPTIONAL];
 
   // Login page URI associated with the GCIP tenants.
@@ -464,11 +465,12 @@ message GcipSettings {
   google.protobuf.StringValue login_page_uri = 2;
 }
 
-// Allows customers to configure HTTP request paths that'll allow HTTP OPTIONS
-// call to bypass authentication and authorization.
+// Allows customers to configure HTTP request paths that'll allow HTTP
+// `OPTIONS` call to bypass authentication and authorization.
 message CorsSettings {
-  // Configuration to allow HTTP OPTIONS calls to skip authorization. If
-  // undefined, IAP will not apply any special logic to OPTIONS requests.
+  // Configuration to allow HTTP `OPTIONS` calls to skip
+  // authentication and authorization. If undefined, IAP will not apply any
+  // special logic to `OPTIONS` requests.
   google.protobuf.BoolValue allow_http_options = 1;
 }
 
