What
Administrators can now require gateway login from managed policy settings: it applies when forceLoginMethod is "gateway", or when forceLoginGatewayUrl is set and no method is named.
Details
- Managed policy settings are the admin-controlled settings file that overrides user and project settings.
- The org-enforcement path's fail-closed branch now triggers whenever policy settings are missing and load errors are present, not only when the org identifier is absent; it still reports
policy_unreadable_fail_close.
Evidence
forceLoginGatewayUrl
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Names in the bundleforceLoginMethodforceLoginGatewayUrl
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up forceLoginGatewayUrl, on All settings.
* **[`forceLoginGatewayUrl`](#forcelogingatewayurl) and the `"gateway"` value of [`forceLoginMethod`](#forceloginmethod)**: Claude Code never reads either from server-managed settings, so a value there neither applies nor hides one set in …settings-reference see the edit
Added since
A small documentation edit on Deploy managed settings touched a line naming forceLoginGatewayUrl after this was published.
The [gateway login keys](#choose-a-delivery-mechanism), [`forceLoginGatewayUrl`](/docs/en/settings-reference#forcelogingatewayurl) and the `"gateway"` value of [`forceLoginMethod`](/docs/en/settings-reference#forceloginmethod), follow a se…managed-settings see the edit
Added since
A small documentation edit on Deploy managed settings touched a line naming forceLoginMethod after this was published.
The [gateway login keys](#choose-a-delivery-mechanism), [`forceLoginGatewayUrl`](/docs/en/settings-reference#forcelogingatewayurl) and the `"gateway"` value of [`forceLoginMethod`](/docs/en/settings-reference#forceloginmethod), follow a se…managed-settings see the edit
Confirmed since
Anthropic's documentation has since written up forceLoginMethod, on Authentication.
Deploy the keys through your device management tooling. [Server-managed settings](/docs/en/server-managed-settings) reach only accounts that are already authenticated into your organization, so they can't redirect a developer's first login…authentication see the edit
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agrees
Anthropic's documentation has since written up forceLoginMethod, on Authentication.