{"version":"2.1.293","anchor":"new-external-idp-credential-kind-with-inferenceidpoidc-i","canonical_anchor":"new-external-idp-credential-kind-with-inferenceidpoidc-i","heading":"Company sign-in settings now work beyond the gateway, including Bedrock proxies","tier":"use","area":"Auth","scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.293\/e\/new-external-idp-credential-kind-with-inferenceidpoidc-i","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.293","markdown":"### Company sign-in settings now work beyond the gateway, including Bedrock proxies\n\nNew `inferenceIdpOidc` and `inferenceIdpAuthFlow` settings extend company sign-in to more setups, including Bedrock proxies\n\n**Unclear.** These settings are read by the desktop app's settings readers, and it is not clear whether the Claude Code command line also honours them.\n\n**What**\n\nSign-in through a company identity provider using OpenID Connect (OIDC, a standard way to log in through an organisation's single sign-on system) is no longer tied to the gateway setup. A new credential kind, `external-idp`, comes with two new settings:\n\n- `inferenceIdpOidc` configures the identity provider sign-in.\n\n- `inferenceIdpAuthFlow` chooses between browser sign-in and broker sign-in.\n\nThis also covers Bedrock proxies. The older gateway settings, `inferenceGatewayOidc` and `inferenceGatewayOidcAuthFlow`, are still read, but they are now marked as deprecated, with no date set for their removal.\n\nA warning is now shown when a token of type `access_token` is configured without an API resource scope. Several Foundry, Bedrock and other settings are also now marked as applying only to the desktop app.\n\n**Why**\n\nAdministrators who already use single sign-on can reuse the same sign-in setup with Bedrock proxies and other providers instead of only with the gateway. Existing configurations that use the gateway settings keep working for now, but they are worth moving to the new names.\n\n- Area: Auth\n- Names: `external-idp`\n- Tier: Use it now\n- Useful: 5\/5\n- Signal: 3\/5\n- Scope: org\n- Heads-up: no"}