The whole hunk
from line 1, old and new numbered
/
lines
from line 1
1---
2title: Create Federation Issuer
3url: https://platform.claude.com/docs/en/api/beta/organization/federation/issuers/create
4---
5
16# Create Federation Issuer
27
38**POST** `/v1/organizations/federation_issuers`
from line 29
2429
2530 - `string`
2631
27 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 41 more`
32 - `"message-batches-2024-09-24" or "prompt-caching-2024-07-31" or "computer-use-2024-10-22" or 42 more`
2833
2934 - `"message-batches-2024-09-24"`
3035
from line 77
7277
7378 - `"user-profiles-2026-08-18"`
7479
80 - `"user-profiles-2026-09-04"`
81
7582 - `"advisor-tool-2026-03-01"`
7683
7784 - `"managed-agents-2026-04-01"`
from line 181
174181
175182 JWKS supplied directly; no network fetch.
176183
184 - `type: "inline"`
185
177186 - `keys: array of map[unknown]`
178187
179188 Inline JWK objects.
from line 189
180189
181190 minItems: 1
182191
183 - `type: "inline"`
184
185192- `max_jwt_lifetime_seconds: optional number or null`
186193
187194 Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Defaults to 3600 (1h). Assertions must carry both `iat` and `exp`; a missing `iat` is rejected.
from line 204
197204 Records an external IdP the organization trusts for the RFC 7523
198205 jwt-bearer grant. The `issuer_url` must match the JWT `iss` claim exactly.
199206
207 - `type: "federation_issuer"`
208
209 default: federation_issuer
210
200211 - `id: string`
201212
202213 Tagged ID of the federation issuer.
from line 282
271282
272283 JWKS supplied directly; no network fetch.
273284
285 - `type: "inline"`
286
274287 - `keys: array of map[unknown]`
275288
276289 Inline JWK objects.
from line 290
277290
278291 minItems: 1
279292
280 - `type: "inline"`
281
282293 - `jwks_polling_disabled_at: string or null`
283294
284295 If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending `jwks_polling_disabled: false` via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than `workspace:developer` or `workspace:inference`; use a Console session.
from line 327
316327 When the next fetch is scheduled. Null if paused.
317328
318329 format: date-time
319
320 - `type: "federation_issuer"`
321
322 default: federation_issuer
323330
324331 - `updated_at: string`
325332