{"version":"2.1.323","anchor":"auth-held-sign-in-telemetry-for-session-profile-and-session","canonical_anchor":"auth-held-sign-in-telemetry-for-session-profile-and-session","heading":"More kinds of refused sign-in are counted separately in diagnostics","tier":"internal","area":"Auth","scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323\/e\/auth-held-sign-in-telemetry-for-session-profile-and-session","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323","markdown":"### More kinds of refused sign-in are counted separately in diagnostics\n\nSign-ins refused for the session profile or session environment are now counted in their own diagnostic category\n\n**What**\n\nWhen an API request fails because the sign-in was refused for the session profile or the session environment, Claude Code now counts it as a held sign-in in its diagnostic reports. These failures are no longer counted as stored logins refused under managed settings. Before, only session owner refusals were kept out of that count.\n\n**Why**\n\nThis only changes diagnostic reporting, not how Claude Code behaves for you.\n\n- Area: Auth\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 1\/5\n- Scope: org\n- Heads-up: no"}