A per-profile sign-in can store logins under a named profile, but it is switched off here.
Profile-based credential storage keyed by ANTHROPIC_PROFILE is built, but the login screen only reaches it via a flag not visible in the bundle.
What's wrong with this entry?
A new sign-in path writes an OAuth login into configs/<profile>.json plus an active_config marker under the Anthropic config directory, with the profile name taken from ANTHROPIC_PROFILE (letters, digits, underscore, dot and hyphen only). Whether it is reachable is decided by a flag the login screen is handed, whose source is not visible in the bundle, so treat it as off.
- It refuses, each with its own plain-English message, when: workload identity federation is configured (
ANTHROPIC_FEDERATION_RULE_IDplusANTHROPIC_ORGANIZATION_ID), the session uses Bedrock, Vertex or Foundry,ANTHROPIC_API_KEYis set, an API-key helper or injected token is in play, the profile was written by another tool, the profile has a custom credentials path, or the profile is bound to a different Anthropic deployment. - Signing out deletes the profile's credential file and can revoke the token.
- None of these messages exist in 2.1.241.
Console profile login refused: env credential shadows the profile
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.247
ANTHROPIC_PROFILE selects the workload-identity profile
Both mention profile auth
-
v2.1.248
Startup profiling records a fixed set of named phases
Both mention profile
-
v2.1.234
Signing back into the same account keeps a pending auto-resume
Both mention auth