The whole hunk
from line 4, old and new numbered
/
lines
from line 4
44
55Configuration keys by Claude Desktop release. Each section lists keys added in that release, with the MDM key name (for plist/registry deployment) and the equivalent JSON shape (for local-file or bootstrap remote configuration).
66
7<Update label="v2.7032.0" description="2026-09-22">
8 <div className="cfg-keys">
9 | MDM key | Type | Description |
10 | ------------------------------------------------------------------------------------------------------------------------ | --------- | ------------------------------------- |
11 | [`inferenceIdpAuthFlow`](/docs/third-party/claude-desktop/configuration#inferenceidpauthflow) | `enum` | Identity provider sign-in flow |
12 | [`inferenceIdpOidc`](/docs/third-party/claude-desktop/configuration#inferenceidpoidc) | `object` | Identity provider (OIDC) |
13 | [`mcpScheduledTaskApprovalLifetimeDays`](/docs/third-party/claude-desktop/configuration#mcpscheduledtaskapprovallifetimedays) | `integer` | Scheduled-task tool approval lifetime |
14 | [`keepAwakeEnabled`](/docs/third-party/claude-desktop/configuration#keepawakeenabled) | `boolean` | Allow keep awake |
15 </div>
16
17 **Set in the Claude admin console only:**
18
19 * [`disableLocalConfigCache`](/docs/third-party/claude-desktop/configuration#disablelocalconfigcache) — Keep only your organization ID and restrictions on disk
20
21 **JSON (e.g. for non-MDM users or Bootstrap):**
22
23 ```json theme={null}
24 {
25 "inference": {
26 "credential": {
27 "authFlow": "<browser|broker>",
28 "oidc": {
29 "clientId": "<string>",
30 "issuer": "<string>",
31 "authorizationUrl": "<string>",
32 "tokenUrl": "<string>",
33 "bearerTokenType": "<id_token|access_token>",
34 "scopes": "<string>",
35 "appendOfflineAccess": "<boolean>",
36 "resource": "<string>",
37 "redirectPort": "<integer>",
38 "redirectHost": "<127.0.0.1|localhost>",
39 "additionalRedirectReferrerHosts": "<string>"
40 }
41 }
42 },
43 "mcp": {
44 "scheduledTaskApprovalLifetimeDays": "<integer>"
45 },
46 "workspace": {
47 "keepAwakeEnabled": "<boolean>"
48 }
49 }
50 ```
51
52 **Changed:**
53
54 * `inferenceCredentialKind` accepts `external-idp` for the gateway and Bedrock providers: users sign in through your organization's OpenID Connect identity provider (`inferenceIdpOidc`, `inferenceIdpAuthFlow`) and the token is sent as the Bearer credential, on Bedrock to a token-validating proxy at `inferenceBedrockBaseUrl`, which that kind requires.
55
56 **Deprecated** (no end date has been set; the original spellings keep working):
57
58 * `inferenceCredentialKind: "interactive"` together with `inferenceGatewayOidc` (gateway): use `"external-idp"` instead once every desktop in the fleet is on 2.7032.0 or later; 2.7032.0 and later read the original spelling as `"external-idp"`.
59 * `inferenceGatewayOidc`: use `inferenceIdpOidc` with `inferenceCredentialKind: "external-idp"` instead, once every desktop in the fleet is on 2.7032.0 or later.
60 * `inferenceGatewayOidcAuthFlow`: use `inferenceIdpAuthFlow` together with `inferenceIdpOidc` instead, once every desktop in the fleet is on 2.7032.0 or later.
61</Update>
62
763<Update label="v2.2553.13" description="2026-09-21">
864 No configuration changes in this release.
965</Update>