103 pages for oidc.
Titles and paths first, then pages whose text carries it. Each row opens that page as this site last read it.
overview
Claude Developer Platform · in the page
release-notes/overview
…ederation). Authenticate workloads to the Claude API with short-lived OIDC tokens from your own identity provider (AWS IAM, Google Cloud, GitHub Actions, Kubernetes, Microsoft Entra ID, Okta, SPIFFE,…
Authentication
Claude Code CLI · in the page
authentication
…Linux or `%APPDATA%\Anthropic` on Windows. A profile's auth mode is `oidc_federation` when you set it up for [Workload Identity Federation (WIF)](https://platform.claude.com/docs/en/manage-claude/wor…
Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry
Claude Code CLI · in the page
claude-apps-gateway
…ude Code v2.1.198 or later on the gateway server. | | OpenID Connect (OIDC) identity provider | Okta, Microsoft Entra ID, Google Workspace, Keycloak, or Dex, or any other OIDC-compliant IdP such as Pi…
Claude apps gateway configuration
Claude Code CLI · in the page
claude-apps-gateway-config
…uration > Reference for every gateway.yaml option: listener and TLS, OIDC, session, Postgres store, Amazon Bedrock, Claude Platform on AWS, Google Cloud's Agent Platform, and Microsoft Foundry upstre…
Claude apps gateway deployment and operations
Claude Code CLI · in the page
claude-apps-gateway-deploy
…dentity provider setup Register a confidential OAuth/OpenID Connect (OIDC) web application with a single redirect URI, `https://<gateway>/oauth/callback`, and assign it to the users or groups who sho…
Deploy Claude apps gateway on AWS
Claude Code CLI · in the page
claude-apps-gateway-on-aws
…com/) is the example identity provider (IdP), but any OpenID Connect (OIDC) compliant IdP works; see [Identity provider setup](/docs/en/claude-apps-gateway-deploy#identity-provider-setup) for per-IdP…
Deploy Claude apps gateway on Google Cloud
Claude Code CLI · in the page
claude-apps-gateway-on-gcp
…space is the example identity provider (IdP), but any OpenID Connect (OIDC) compliant IdP works; only the `oidc` block changes. See [Identity provider setup](/docs/en/claude-apps-gateway-deploy#identi…
Claude apps gateway spend limits
Claude Code CLI · in the page
claude-apps-gateway-spend-limits
…organization` | `user` targets one developer by their OpenID Connect (OIDC) `sub`, the stable user ID your identity provider assigns; pass it as `scope.user_id`. `rbac_group` targets an [IdP group](/d…
Desktop application
Claude Code CLI · in the page
desktop
…icles/13132885-setting-up-single-sign-on-sso) for SAML configuration; OIDC setup is covered in the [Claude Enterprise Administrator Guide](https://claude.com/resources/tutorials/claude-enterprise-admi…
Claude Code GitHub Actions
Claude Code CLI · in the page
github-actions
…de Code GitHub Action exchanges the workflow's GitHub OpenID Connect (OIDC) token for Claude API access through a Claude Console service account. Set these inputs: * `anthropic_federation_rule_id`: t…
Use Claude Code GitHub Actions with cloud providers
Claude Code CLI · in the page
github-actions-cloud-providers
…nput and configure your cloud to trust the workflow's OpenID Connect (OIDC) token. The workflow authenticates with that token, so you store no long-lived cloud credential in your repository. > [!NOTE…
Claude Code GitLab CI/CD
Claude Code CLI · in the page
gitlab-ci-cd
…CI/CD variable * **Amazon Bedrock**: **Configure GitLab** → **AWS OIDC** and create an IAM role for Amazon Bedrock * **Google Cloud's Agent Platform**: **Configure Workload Identity Federation…
Monitoring
Claude Code CLI · in the page
monitoring-usage
…-separated string. Each export also carries `identity.source: gateway-oidc`. The gateway identity is applied last, so `user.*` and `identity.*` keys set through `OTEL_RESOURCE_ATTRIBUTES` are ignored…
Connect an authorization server
Claude Documentation · in the page
claude-tag/admins/federated-access/authorization-server
…/identity.anthropic.com/agents`, matched exactly. The OpenID Connect (OIDC) discovery document is at `https://identity.anthropic.com/agents/.well-known/openid-configuration`. | | JWKS URL | The JSON W…
Connect an AWS role
Claude Documentation · in the page
claude-tag/admins/federated-access/aws
…In the AWS account that owns the role, create an IAM OpenID Connect (OIDC) identity provider with the provider URL `https://identity.anthropic.com/agents` and the audience `sts.amazonaws.com`. Includ…
Connect a gateway
Claude Documentation · in the page
claude-tag/admins/federated-access/connect-a-gateway
…d `jti` as a replay. Verify it with a standard JWT or OpenID Connect (OIDC) library configured with these values. | Value | What to configure | | :- | :- | | Issuer | `https://identity.anthropic.com/…
Connect a Google Cloud identity
Claude Documentation · in the page
claude-tag/admins/federated-access/gcp
…Google Cloud Create a workload identity pool and an OpenID Connect (OIDC) provider in it with these settings. Replace `<your organization ID>` with the ID from your **Subject prefix**. | Setting |…
Federated agent access
Claude Documentation · in the page
claude-tag/admins/federated-access/overview
…y-sample) is a starting point. | | **AWS role** | AWS, through an IAM OIDC identity provider. AWS issues temporary credentials for a role whose trust policy names Anthropic's issuer and your organizat…
Identity token reference
Claude Documentation · in the page
claude-tag/admins/federated-access/token-reference
…. Match it exactly, including the `/agents` path. | | OpenID Connect (OIDC) discovery document | `https://identity.anthropic.com/agents/.well-known/openid-configuration` | | Signing keys, as a JSON We…
Troubleshoot federated agent access
Claude Documentation · in the page
claude-tag/admins/federated-access/troubleshooting
…or | What to confirm | | :- | :- | | `InvalidIdentityToken` | The IAM OIDC identity provider's URL is exactly `https://identity.anthropic.com/agents`, with the `/agents` path (AWS displays it without…
Enterprise Managed Auth for connectors
Claude Documentation · in the page
connectors/building/enterprise-managed-auth
…access token, and serves its metadata for discovery * Bring your own OIDC or SAML identity provider in place of the sandbox one * Re-run a single failed step and inspect service configurations, disco…
Microsoft 365 connector
Claude Documentation · in the page
connectors/microsoft/365
…tor](https://learn.microsoft.com/en-us/entra/identity-platform/scopes-oidc#the-default-scope). The connector's **Permissions** page in the Entra admin center (under **Enterprise applications**, listed…
Changelog
Claude Documentation · in the page
cowork/changelog
…otherwise show the inference provider's name. * Changed `inferenceIdpOidc.resource` (and `inferenceGatewayOidc.resource` in existing gateway configurations) to also accept an identifier with a scheme…
Claude for Government changelog
Claude Documentation · in the page
government/changelog
…he Issuer against what your identity provider publishes when you save OIDC single sign-on. * Added a Test sign-in button to the Single sign-on settings on the tenant portal's Identity and access page,…
Connect Claude Desktop to Claude for Government
Claude Documentation · in the page
government/deploy-desktop/configure
…ot used here. Keys for a separate sign-in provider, such as `bootstrapOidc` and `inferenceGatewayOidc` in the Claude Desktop [configuration reference](/docs/third-party/claude-desktop/configuration),…
Identity and access
Claude Documentation · in the page
government/tenant-admin/identity-and-access
…. Your identity provider needs to support SAML 2.0 or OpenID Connect (OIDC). You register Claude for Government as an application in your identity provider, then enter your provider's connection deta…
Tenant administration
Claude Documentation · in the page
government/tenant-admin/overview
…-and-access)** page lets you connect single sign-on (using either the OIDC or SAML protocol, whichever your identity provider supports), manage the SCIM provisioning token, write the routing rules tha…
Tenant setup wizard
Claude Documentation · in the page
government/tenant-admin/setup-wizard
…provider, create an application and paste in those values. In return, OIDC gives you a client ID, a secret, and four endpoints. SAML gives one metadata file. > > First, in another window, confirm you…
Video walkthroughs for administrators
Claude Documentation · in the page
government/video-walkthroughs
…ur agency's email domain, then connecting your identity provider with OIDC or SAML in the setup wizard. Read more: [Step 2: Domains](/docs/government/tenant-admin/setup-wizard#step-2-domains) and [Sin…
Use Claude for M365 with third-party platforms
Claude Documentation · in the page
office-agents/third-party-platforms
…| AWS account with Claude model access enabled in target region. IAM OIDC identity provider and role configured to trust Microsoft Entra ID tokens. | | Vertex AI direct | Google Cloud project with Ve…
Deploy with Enterprise Admin Console
Claude Documentation · in the page
third-party/claude-desktop/admin-console
…rts: **Interactive sign-in** in the app, **Identity provider sign-in (OIDC)** (for example, for [Amazon Bedrock behind an authenticating proxy](/docs/third-party/claude-desktop/bedrock#sign-in-with-yo…
Deploy Claude Desktop on 3P with Amazon Bedrock
Claude Documentation · in the page
third-party/claude-desktop/bedrock
…provider sign-in](#sign-in-with-your-identity-provider) (`inferenceIdpOidc`) | None | At your proxy | Users sign in with your identity provider; the proxy calls Amazon Bedrock with its own AWS credent…
Deploy with a bootstrap server
Claude Documentation · in the page
third-party/claude-desktop/bootstrap
…profile supplies the trust anchor (`bootstrapUrl`, optional `bootstrapOidc` or `bootstrapHeaders`/`bootstrapHeadersHelper`, and the `bootstrapEnabled` opt-out), and Claude Desktop does not consult MDM…
Configuration reference
Claude Documentation · in the page
third-party/claude-desktop/configuration
…ay- and object-typed keys such as `inferenceModels`, `inferenceGatewayOidc`, `managedMcpServers`, `coworkEgressAllowedHosts`, and `otlpHeaders` are single keys whose value is a whole JSON document. Th…
Configuration changelog
Claude Documentation · in the page
third-party/claude-desktop/configuration-changelog
…Auto mode stays off on devices that have not updated. * `inferenceIdpOidc` and `inferenceGatewayOidc`: `resource` accepts, besides a web address, an identifier with a scheme of its own that is not a…
Sign in through the OS identity broker
Claude Documentation · in the page
third-party/claude-desktop/entra-broker
…tra-id-sign-in) | | LLM gateway single sign-on | Set `inferenceGatewayOidcAuthFlow` to `broker` | [LLM gateway](/docs/third-party/claude-desktop/gateway#single-sign-on-configuration-keys) | | Workforc…
Deploy Claude Desktop on 3P with an LLM gateway
Claude Documentation · in the page
third-party/claude-desktop/gateway
…gn-on](#single-sign-on-with-your-identity-provider) (`inferenceGatewayOidc`) | Each user signs in with their own work account. Requires app version 1.6889.0 or later. | | Your organization already has…
Installation and setup
Claude Documentation · in the page
third-party/claude-desktop/installation
…taining only the bootstrap keys (`bootstrapUrl`, optionally `bootstrapOidc` or request headers) | | Where settings live | In the Enterprise Admin Console, which Anthropic hosts and your administrators…
Telemetry and egress
Claude Documentation · in the page
third-party/claude-desktop/telemetry
…nge (profile auth only) | | `portal.sso.<sso-region>.amazonaws.com`, `oidc.<sso-region>.amazonaws.com` | IAM Identity Center sign-in and token refresh, for [in-app AWS sign-in](/docs/third-party/claud…
Deploy Claude Desktop on 3P with Google Cloud's Agent Platform
Claude Documentation · in the page
third-party/claude-desktop/vertex
…in (OAuth) | | - | - | - | | OAuth peer the app talks to | Your IdP's OIDC endpoints | Google's OAuth 2.0 endpoints | | Where your corporate IdP appears | Directly (the app opens it) | Inside Google's…
Enterprise Interest Group Charter
Model Context Protocol · in the page
community/interest-groups/enterprise
…nterprise-managed auth patterns including IdP integration (SSO, SAML, OIDC), token lifecycle management, On-Behalf-Of (OBO) token exchange flows, and fine-grained authorization (Rich Authorization Req…
Registry Charter
Model Context Protocol · in the page
community/working-groups/registry
…* **Publishing & Trust**: Authentication flows (GitHub OAuth, GitHub OIDC, DNS/HTTP verification), namespace ownership, moderation tooling, and community-driven flagging. * **Adoption & Outreach**: D…
Understanding Authorization in MCP
Model Context Protocol · in the page
docs/2024-11-05/tutorials/security/authorization
…t a standard metadata URI and issue a request to the [OpenID Connect (OIDC) Discovery](https://openid.net/specs/openid-connect-discovery-1_0.html) or [OAuth 2.0 Auth Server Metadata](https://datatrack…
Understanding Authorization in MCP
Model Context Protocol · in the page
docs/2025-03-26/tutorials/security/authorization
…t a standard metadata URI and issue a request to the [OpenID Connect (OIDC) Discovery](https://openid.net/specs/openid-connect-discovery-1_0.html) or [OAuth 2.0 Auth Server Metadata](https://datatrack…
Understanding Authorization in MCP
Model Context Protocol · in the page
docs/2025-06-18/tutorials/security/authorization
…t a standard metadata URI and issue a request to the [OpenID Connect (OIDC) Discovery](https://openid.net/specs/openid-connect-discovery-1_0.html) or [OAuth 2.0 Auth Server Metadata](https://datatrack…
Understanding Authorization in MCP
Model Context Protocol · in the page
docs/2025-11-25/tutorials/security/authorization
…t a standard metadata URI and issue a request to the [OpenID Connect (OIDC) Discovery](https://openid.net/specs/openid-connect-discovery-1_0.html) or [OAuth 2.0 Auth Server Metadata](https://datatrack…
Understanding Authorization in MCP
Model Context Protocol · in the page
docs/2026-07-28/tutorials/security/authorization
…t a standard metadata URI and issue a request to the [OpenID Connect (OIDC) Discovery](https://openid.net/specs/openid-connect-discovery-1_0.html) or [OAuth 2.0 Auth Server Metadata](https://datatrack…
Understanding Authorization in MCP
Model Context Protocol · in the page
docs/draft/tutorials/security/authorization
…t a standard metadata URI and issue a request to the [OpenID Connect (OIDC) Discovery](https://openid.net/specs/openid-connect-discovery-1_0.html) or [OAuth 2.0 Auth Server Metadata](https://datatrack…
How to Automate Publishing with GitHub Actions
Model Context Protocol · in the page
registry/github-actions
…egistry publishing steps are the same for all package types: ```yaml OIDC authentication (recommended) theme={null} name: Publish to MCP Registry on: push: tags: ["v*"] # Triggers on version t…
SEP-2468: Recommend Issuer (iss) Parameter in MCP Auth Responses
Model Context Protocol · in the page
seps/2468-recommend-issuer-claim-for-auth
…suer binding fields * Rejected in favor of reusing established OAuth/OIDC mechanisms. Requiring unique redirect\_uri per issuer * CIMD metadata documents are static and cannot enumerate every issue…