diff --git a/docs/index.md b/docs/index.md
index 09d6704..05509c6 100644
--- a/docs/index.md
+++ b/docs/index.md
@@ -15,33 +15,43 @@ description: |-
 ```terraform
 provider "bluechip" {
   address = "app.bluechip.com"
-  basic_auth {
-    username = "myuser"
-    password = "mypassword"
+  auth_flow {
+    basic {
+      username = "myuser"
+      password = "mypassword"
+    }
   }
 }
 
 provider "bluechip" {
   alias   = "token"
   address = "app.bluechip.com"
-  token   = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"
+  auth_flow {
+    token {
+      token = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"
+    }
+  }
 }
 
 provider "bluechip" {
   alias   = "aws"
   address = "app.bluechip.com"
-  aws_auth {
-    cluster_name = "bluechip-prod"
-    region       = "us-east-1"
+  auth_flow {
+    aws {
+      cluster_name = "bluechip-prod"
+      region       = "us-east-1"
+    }
   }
 }
 
 provider "bluechip" {
   alias   = "oidc"
   address = "app.bluechip.com"
-  oidc_auth {
-    validator_name = "kubernetes-centre"
-    token          = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"
+  auth_flow {
+    oidc {
+      validator_name = "kubernetes-centre"
+      token          = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"
+    }
   }
 }
 ```
@@ -49,16 +59,26 @@ provider "bluechip" {
 <!-- schema generated by tfplugindocs -->
 ## Schema
 
+### Required
+
+- `auth_flow` (Block List, Min: 1) (see [below for nested schema](#nestedblock--auth_flow))
+
 ### Optional
 
 - `address` (String)
-- `aws_auth` (Block List, Max: 1) (see [below for nested schema](#nestedblock--aws_auth))
-- `basic_auth` (Block List, Max: 1) (see [below for nested schema](#nestedblock--basic_auth))
-- `oidc_auth` (Block List, Max: 1) (see [below for nested schema](#nestedblock--oidc_auth))
-- `token` (String)
 
-<a id="nestedblock--aws_auth"></a>
-### Nested Schema for `aws_auth`
+<a id="nestedblock--auth_flow"></a>
+### Nested Schema for `auth_flow`
+
+Optional:
+
+- `aws` (Block List, Max: 1) Only one of token, basic, aws, oidc can be specified. (see [below for nested schema](#nestedblock--auth_flow--aws))
+- `basic` (Block List, Max: 1) Only one of token, basic, aws, oidc can be specified. (see [below for nested schema](#nestedblock--auth_flow--basic))
+- `oidc` (Block List, Max: 1) Only one of token, basic, aws, oidc can be specified. (see [below for nested schema](#nestedblock--auth_flow--oidc))
+- `token` (Block List, Max: 1) Only one of token, basic, aws, oidc can be specified. (see [below for nested schema](#nestedblock--auth_flow--token))
+
+<a id="nestedblock--auth_flow--aws"></a>
+### Nested Schema for `auth_flow.aws`
 
 Optional:
 
@@ -70,8 +90,8 @@ Optional:
 - `session_token` (String)
 
 
-<a id="nestedblock--basic_auth"></a>
-### Nested Schema for `basic_auth`
+<a id="nestedblock--auth_flow--basic"></a>
+### Nested Schema for `auth_flow.basic`
 
 Optional:
 
@@ -79,8 +99,8 @@ Optional:
 - `username` (String)
 
 
-<a id="nestedblock--oidc_auth"></a>
-### Nested Schema for `oidc_auth`
+<a id="nestedblock--auth_flow--oidc"></a>
+### Nested Schema for `auth_flow.oidc`
 
 Required:
 
@@ -89,3 +109,12 @@ Required:
 Optional:
 
 - `token` (String)
+- `token_env` (String)
+
+
+<a id="nestedblock--auth_flow--token"></a>
+### Nested Schema for `auth_flow.token`
+
+Optional:
+
+- `token` (String)