The whole hunk
from line 4, old and new numbered
/
lines
from line 4
44
55**GET** `/v1/organizations/federation_rules/{federation_rule_id}/workspaces`
66
7**Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
8
79List workspaces where this federation rule is enabled.
810
911Returns all workspace enablements in a single response; the `limit` and
from line 79
7779```bash
7880curl https://api.anthropic.com/v1/organizations/federation_rules/$FEDERATION_RULE_ID/workspaces \
7981 -H 'anthropic-version: 2023-06-01' \
80 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN"
82 -H "Authorization: Bearer $ANTHROPIC_AUTH_TOKEN"
8183```
8284
8385#### Response (200)
from line 104
102104
103105**POST** `/v1/organizations/federation_rules/{federation_rule_id}/workspaces`
104106
107**Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
108
105109Enable a federation rule for a workspace.
106110
107111Idempotent; re-enabling returns the existing enablement. The rule and
from line 113
109113rule's target service account in this workspace is not checked at
110114enablement: token exchange into this workspace is rejected unless the
111115target is a member (it is implicitly a member of the default workspace).
112Archived rules are rejected with 400. OAuth callers may only manage rules whose
113`oauth_scope` is `workspace:developer` or `workspace:inference`; other
114scopes require a Console session. Admin API keys are not accepted.
116Archived rules are rejected with 400. OAuth callers may only manage rules
117whose `oauth_scope` is `workspace:developer` or `workspace:inference`;
118other scopes require a Console session.
115119
116120### Path parameters
117121
from line 171
167171curl https://api.anthropic.com/v1/organizations/federation_rules/$FEDERATION_RULE_ID/workspaces \
168172 -H 'Content-Type: application/json' \
169173 -H 'anthropic-version: 2023-06-01' \
170 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN" \
174 -H "Authorization: Bearer $ANTHROPIC_AUTH_TOKEN" \
171175 -d '{
172176 "workspace_id": "workspace_id"
173177 }'
from line 194
190194
191195**DELETE** `/v1/organizations/federation_rules/{federation_rule_id}/workspaces/{workspace_id}`
192196
197**Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
198
193199Disable a federation rule for a workspace.
194200
195201Idempotent; succeeds even if the enablement was already removed. OAuth
196202callers may only manage rules whose `oauth_scope` is
197203`workspace:developer` or `workspace:inference`; other scopes require a
198Console session. Admin API keys are not accepted.
204Console session.
199205
200206### Path parameters
201207
from line 241
235241curl https://api.anthropic.com/v1/organizations/federation_rules/$FEDERATION_RULE_ID/workspaces/$WORKSPACE_ID \
236242 -X DELETE \
237243 -H 'anthropic-version: 2023-06-01' \
238 -H "Authorization: Bearer $ANTHROPIC_OAUTH_TOKEN"
244 -H "Authorization: Bearer $ANTHROPIC_AUTH_TOKEN"
239245```
240246
241247#### Response (200)