A new authFlow setting for inferenceGatewayOidc and inferenceVertexWorkforceOidc (flat key inferenceGatewayOidcAuthFlow) chooses between browser and broker sign-in. The broker option routes sign-in through the OS identity broker (Windows Web Account Manager or macOS Company Portal) instead of a system browser, but requires the IdP to be Microsoft Entra ID and is not supported on Linux.
Names in the bundleinferenceGatewayOidcAuthFlow
Documented inclaude-docs/cowork/changelog
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Confirmed since
Anthropic's documentation has since written up inferenceGatewayOidcAuthFlow, on Configuration reference.
| <span id="inferencegatewayoidcauthflow" />Gateway sign-in flow<br />`inferenceGatewayOidcAuthFlow` | `enum` | MDM + Bootstrap<br />Added in 1.25927.0 | — | How the IdP sign-in runs: system browser (default) or the OS Microsoft Entra brok…third-party/claude-desktop/configuration see the edit
One source agreesOne thing we can check says the same as this entry.
Anthropic's documentation agrees
Anthropic's documentation has since written up inferenceGatewayOidcAuthFlow, on Configuration reference.