When managed settings require first-party login but a non-OAuth credential is configured under an org policy specifically set to "gateway" mode, the validation error message is now more specific. It tells the user to remove the Anthropic-issued credential and sign in with /login, or, if the provider is managed via CLAUDE_CODE_USE_*, notes that no sign-in is needed.
Names in the bundle/login
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Added since
A small documentation edit on Claude Code on Claude Platform on AWS touched a line naming /login after this was published.
The `/login` and `/logout` commands don't sign you into a claude.ai subscription for Claude Platform on AWS. Authentication runs through your AWS credentials or workspace API key.claude-platform-on-aws see the edit
Confirmed since
Anthropic's documentation has since written up /login, on Claude Code changelog.
* Added the `gatewayInternalNetworks` managed setting, letting administrators allow `/login` to a Claude apps gateway on their organization's own public IPv4 blockchangelog see the edit
Two sources agreeTwo things we can check say the same as this entry.
Anthropic's documentation agrees
Anthropic's documentation has since written up /login, on Claude Code changelog.
Anthropic's release notes agree
Changed a Claude apps gateway 403 on the managed settings load (at startup or after /login) to say Claude Code may not be enabled for the…