Unclear It is not clear whether Claude Code reads microsoftAuthDefaultAccount or only the Windows desktop app does.
What
The managed settings that administrators set for third-party deployments change in three ways:
microsoftAuthDefaultAccountis a new setting, either enabled or disabled, and disabled by default. When enabled, it allows silent Microsoft 365 sign-in with the Windows account.inferenceCredentialKindis now listed as read by Claude Code, as well as by the desktop app and Microsoft 365.- The description of the inference provider setting now says that a value set through device management still counts as set, even when it cannot be read.
Why
Admins can now expect inferenceCredentialKind to apply to Claude Code too, not only to the other apps.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
It is not clear whether Claude Code reads `microsoftAuthDefaultAccount` or only the Windows desktop app does.