You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
ElsewhereArea: what it touches
ImprovementsKind: in v2.1.284,
ImprovementsSection of the release
What
An organisation can use managed settings (settings an administrator installs on the machine) to require a particular way of signing in, using forceLoginMethod, forceLoginOrgUUID or a cloud gateway requirement. If your session is set up with a different credential, Claude Code now shows a detailed message. It names the credential and where it came from:
a credential supplied by the app hosting Claude Code
--bare, which turns first-party sign-in off, so there is no sign-in at all
The message says which settings file's env block set the credential and suggests specific fixes, such as removing the key from that block or asking your administrator. It also includes a note for administrators: on a third-party desktop session, forceLoginOrgUUID and forceLoginMethod apply to first-party sign-in and should be removed from that machine's managed settings.
Why
If your credentials and your organisation's sign-in policy disagree, you now see which file to change instead of a plain refusal.
The entry above is what we published on the day. These lines were added later, as Anthropic's own pages caught up, and they sit beside the original rather than replacing it.
Added sinceA small documentation edit on All settings touched a line naming forceLoginOrgUUID after this was published.If a managed source sets an empty array, or a value that isn't a string or an array of strings, users who sign in with an Anthropic account can't start Claude Code or complete a login. They see a message that names `forceLoginOrgUUID` and …settings-referencesee the edit
Added sinceA small documentation edit on Deploy Claude apps gateway on AWS touched a line naming forceLoginMethod after this was published.The gateway is now running, but developers can't reach it from `/login` until the gateway URL is on their machines. Deploy the full [managed settings snippet](/docs/en/claude-apps-gateway#set-the-gateway-url), with `forceLoginMethod`, `for…claude-apps-gateway-on-awssee the edit
Confirmed sinceAnthropic's documentation has since written up forceLoginOrgUUID, on Authentication.[`allowedProviders`](/docs/en/settings-reference#allowedproviders) in [managed settings](/docs/en/managed-settings) lists which services a managed machine may reach Claude through, such as the Anthropic API, Amazon Bedrock, or an LLM gatew…authenticationsee the edit
Confirmed sinceAnthropic's documentation has since written up forceLoginMethod, on Authentication.[`allowedProviders`](/docs/en/settings-reference#allowedproviders) in [managed settings](/docs/en/managed-settings) lists which services a managed machine may reach Claude through, such as the Anthropic API, Amazon Bedrock, or an LLM gatew…authenticationsee the edit
How sure we are
Two sources agreeTwo things we can check say the same as this entry.
Anthropic's documentation agreesAnthropic's documentation has since written up forceLoginMethod, on Authentication.
Anthropic's release notes agreeImproved the startup refusal when managed settings require a sign-in (forceLoginMethod or forceLoginOrgUUID) and an API key, token or…
