5 pages for allowed_email_domains.
Titles and paths first, then pages whose text carries it. Each row opens that page as this site last read it.
Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry
Claude Code CLI · in the page
claude-apps-gateway
…on client_id: 0oa1example2 client_secret: ${OIDC_CLIENT_SECRET} allowed_email_domains: [example.com] # reject id_tokens outside your org userinfo_fallback: true # for I…
Claude apps gateway configuration
Claude Code CLI · in the page
claude-apps-gateway-config
…cate client authentication](#certificate-client-authentication). | | `allowed_email_domains` | No | Reject id\_tokens whose `email` claim isn't in one of these domains, case-insensitive. Defense-in-de…
Claude apps gateway deployment and operations
Claude Code CLI · in the page
claude-apps-gateway-deploy
…a service account with domain-wide delegation. Without it, use `oidc.allowed_email_domains` for membership gating and `managed.policies.match.email_domain` for policy assignment. Google also ignores…
Deploy Claude apps gateway on AWS
Claude Code CLI · in the page
claude-apps-gateway-on-aws
…CLIENT_SECRET} # EKS: ${file:/secrets/oidc-client-secret} allowed_email_domains: [example.com] # The Okta org authorization server returns a thin id_token that omits # email and groups…
Deploy Claude apps gateway on Google Cloud
Claude Code CLI · in the page
claude-apps-gateway-on-gcp
…CLIENT_SECRET} # GKE: ${file:/secrets/oidc-client-secret} allowed_email_domains: [example.com] # Google ignores offline_access; these yield refresh tokens: scopes: [openid, profile, em…