diff --git a/clients/google-api-services-cloudidentity/v1beta1/2.0.0/README.md b/clients/google-api-services-cloudidentity/v1beta1/2.0.0/README.md
index f40ff859b1d..64e37dcfb0a 100644
--- a/clients/google-api-services-cloudidentity/v1beta1/2.0.0/README.md
+++ b/clients/google-api-services-cloudidentity/v1beta1/2.0.0/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-cloudidentity</artifactId>
-      <version>v1beta1-rev20260617-2.0.0</version>
+      <version>v1beta1-rev20260722-2.0.0</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-cloudidentity:v1beta1-rev20260617-2.0.0'
+  implementation 'com.google.apis:google-api-services-cloudidentity:v1beta1-rev20260722-2.0.0'
 }
 ```
 
diff --git a/clients/google-api-services-cloudidentity/v1beta1/2.0.0/com/google/api/services/cloudidentity/v1beta1/model/ExternalId.java b/clients/google-api-services-cloudidentity/v1beta1/2.0.0/com/google/api/services/cloudidentity/v1beta1/model/ExternalId.java
new file mode 100644
index 00000000000..e07f44e808b
--- /dev/null
+++ b/clients/google-api-services-cloudidentity/v1beta1/2.0.0/com/google/api/services/cloudidentity/v1beta1/model/ExternalId.java
@@ -0,0 +1,101 @@
+/*
+ * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except
+ * in compliance with the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software distributed under the License
+ * is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
+ * or implied. See the License for the specific language governing permissions and limitations under
+ * the License.
+ */
+/*
+ * This code was generated by https://github.com/googleapis/google-api-java-client-services/
+ * Modify at your own risk.
+ */
+
+package com.google.api.services.cloudidentity.v1beta1.model;
+
+/**
+ * An external identifier for an entity in the Cloud Identity Groups API. Used to link a `Group` in
+ * Cloud Identity Groups API with a corresponding entity in an external identity system or
+ * directory.
+ *
+ * <p> This is the Java data model class that specifies how to parse/serialize into the JSON that is
+ * transmitted over HTTP when working with the Cloud Identity API. For a detailed explanation see:
+ * <a href="https://developers.google.com/api-client-library/java/google-http-java-client/json">https://developers.google.com/api-client-library/java/google-http-java-client/json</a>
+ * </p>
+ *
+ * @author Google, Inc.
+ */
+@SuppressWarnings("javadoc")
+public final class ExternalId extends com.google.api.client.json.GenericJson {
+
+  /**
+   * Required. The unique identifier assigned by the external identity provider. The API does not
+   * enforce uniqueness of IDs across entities, but clients should ensure IDs are unique within
+   * their namespace.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.lang.String id;
+
+  /**
+   * Required. The namespace in which the entity exists. Cannot be empty. Currently, the only
+   * allowable namespace is `"system/external"`.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.lang.String namespace;
+
+  /**
+   * Required. The unique identifier assigned by the external identity provider. The API does not
+   * enforce uniqueness of IDs across entities, but clients should ensure IDs are unique within
+   * their namespace.
+   * @return value or {@code null} for none
+   */
+  public java.lang.String getId() {
+    return id;
+  }
+
+  /**
+   * Required. The unique identifier assigned by the external identity provider. The API does not
+   * enforce uniqueness of IDs across entities, but clients should ensure IDs are unique within
+   * their namespace.
+   * @param id id or {@code null} for none
+   */
+  public ExternalId setId(java.lang.String id) {
+    this.id = id;
+    return this;
+  }
+
+  /**
+   * Required. The namespace in which the entity exists. Cannot be empty. Currently, the only
+   * allowable namespace is `"system/external"`.
+   * @return value or {@code null} for none
+   */
+  public java.lang.String getNamespace() {
+    return namespace;
+  }
+
+  /**
+   * Required. The namespace in which the entity exists. Cannot be empty. Currently, the only
+   * allowable namespace is `"system/external"`.
+   * @param namespace namespace or {@code null} for none
+   */
+  public ExternalId setNamespace(java.lang.String namespace) {
+    this.namespace = namespace;
+    return this;
+  }
+
+  @Override
+  public ExternalId set(String fieldName, Object value) {
+    return (ExternalId) super.set(fieldName, value);
+  }
+
+  @Override
+  public ExternalId clone() {
+    return (ExternalId) super.clone();
+  }
+
+}
diff --git a/clients/google-api-services-cloudidentity/v1beta1/2.0.0/com/google/api/services/cloudidentity/v1beta1/model/Group.java b/clients/google-api-services-cloudidentity/v1beta1/2.0.0/com/google/api/services/cloudidentity/v1beta1/model/Group.java
index 5e0e99663ad..5d50659510e 100644
--- a/clients/google-api-services-cloudidentity/v1beta1/2.0.0/com/google/api/services/cloudidentity/v1beta1/model/Group.java
+++ b/clients/google-api-services-cloudidentity/v1beta1/2.0.0/com/google/api/services/cloudidentity/v1beta1/model/Group.java
@@ -72,6 +72,21 @@ public final class Group extends com.google.api.client.json.GenericJson {
   @com.google.api.client.util.Key
   private DynamicGroupMetadata dynamicGroupMetadata;
 
+  /**
+   * Optional. External identifiers associated with the `Group`. Enables external identity providers
+   * and directory sync tools to link their native unique identifiers with this group. Currently,
+   * the only allowable namespace is `"system/external"`.
+   * The value may be {@code null}.
+   */
+  @com.google.api.client.util.Key
+  private java.util.List<ExternalId> externalIds;
+
+  static {
+    // hack to force ProGuard to consider ExternalId used, since otherwise it would be stripped out
+    // see https://github.com/google/google-api-java-client/issues/543
+    com.google.api.client.util.Data.nullOf(ExternalId.class);
+  }
+
   /**
    * Required. The `EntityKey` of the `Group`.
    * The value may be {@code null}.
@@ -217,6 +232,27 @@ public Group setDynamicGroupMetadata(DynamicGroupMetadata dynamicGroupMetadata)
     return this;
   }
 
+  /**
+   * Optional. External identifiers associated with the `Group`. Enables external identity providers
+   * and directory sync tools to link their native unique identifiers with this group. Currently,
+   * the only allowable namespace is `"system/external"`.
+   * @return value or {@code null} for none
+   */
+  public java.util.List<ExternalId> getExternalIds() {
+    return externalIds;
+  }
+
+  /**
+   * Optional. External identifiers associated with the `Group`. Enables external identity providers
+   * and directory sync tools to link their native unique identifiers with this group. Currently,
+   * the only allowable namespace is `"system/external"`.
+   * @param externalIds externalIds or {@code null} for none
+   */
+  public Group setExternalIds(java.util.List<ExternalId> externalIds) {
+    this.externalIds = externalIds;
+    return this;
+  }
+
   /**
    * Required. The `EntityKey` of the `Group`.
    * @return value or {@code null} for none
diff --git a/clients/google-api-services-cloudidentity/v1beta1/2.0.0/pom.xml b/clients/google-api-services-cloudidentity/v1beta1/2.0.0/pom.xml
index e29d9c1bb7f..70e7bff559a 100644
--- a/clients/google-api-services-cloudidentity/v1beta1/2.0.0/pom.xml
+++ b/clients/google-api-services-cloudidentity/v1beta1/2.0.0/pom.xml
@@ -8,8 +8,8 @@
 
   <groupId>com.google.apis</groupId>
   <artifactId>google-api-services-cloudidentity</artifactId>
-  <version>v1beta1-rev20260617-2.0.0</version>
-  <name>Cloud Identity API v1beta1-rev20260617-2.0.0</name>
+  <version>v1beta1-rev20260722-2.0.0</version>
+  <name>Cloud Identity API v1beta1-rev20260722-2.0.0</name>
   <packaging>jar</packaging>
 
   <inceptionYear>2011</inceptionYear>
diff --git a/clients/google-api-services-cloudidentity/v1beta1/README.md b/clients/google-api-services-cloudidentity/v1beta1/README.md
index f40ff859b1d..64e37dcfb0a 100644
--- a/clients/google-api-services-cloudidentity/v1beta1/README.md
+++ b/clients/google-api-services-cloudidentity/v1beta1/README.md
@@ -22,7 +22,7 @@ Add the following lines to your `pom.xml` file:
     <dependency>
       <groupId>com.google.apis</groupId>
       <artifactId>google-api-services-cloudidentity</artifactId>
-      <version>v1beta1-rev20260617-2.0.0</version>
+      <version>v1beta1-rev20260722-2.0.0</version>
     </dependency>
   </dependencies>
 </project>
@@ -35,7 +35,7 @@ repositories {
   mavenCentral()
 }
 dependencies {
-  implementation 'com.google.apis:google-api-services-cloudidentity:v1beta1-rev20260617-2.0.0'
+  implementation 'com.google.apis:google-api-services-cloudidentity:v1beta1-rev20260722-2.0.0'
 }
 ```