Update Federation Rule changedapi/beta/organization/federation/rules/update
Nearest release: v2.1.283, published 3 hours after this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+4added
Lines−8removed
From line
157
where the diff opens
First seen
26 Aug 2026
this site's first read of the page
Recorded edits6to this page, all time
The whole hunk
from line 157, old and new numbered
/
from line 157
157157
158158- `match: optional BetaFederationRuleMatch or null`
159159
160 Does the incoming JWT qualify?
160 Replaces the entire match object. All populated matcher fields must pass.
161161
162 All populated fields must pass; omitted fields are skipped. At least one
163 of `subject_prefix` (other than a wildcard-only value like `*`), `claims`,
164 or `condition` is required; `audience` alone is not sufficient.
165
166162 - `audience: optional string or null`
167163
168164 Exact match against the `aud` claim (any element if array). When omitted, the JWT's `aud` must still equal Anthropic's expected audience for the issuer; setting this field overrides that default.
from line 185
189185
190186 Replaces the slug identifier (lowercase, digits, hyphens). Unique within the organization; a duplicate name returns 409.
191187
192 maxLength: 255, minLength: 1
188 minLength: 1, maxLength: 255
193189
194190- `oauth_scope: optional string or null`
195191
from line 195
199195
200196- `target: optional BetaServiceAccountTarget or null`
201197
202 Bind to a fixed service account by ID.
198 Replaces the entire target object. Currently always a `service_account` target.
203199
204200 - `type: "service_account"`
205201
from line 211
215211
216212 Replaces the lifetime in seconds for access tokens minted via this rule (60-86400). Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds.
217213
218 maximum: 86400, minimum: 60
214 minimum: 60, maximum: 86400
219215
220216- `workspace_id: optional string or null`
221217
No line in this hunk matches that.