--- title: List Federation Rules url: https://platform.claude.com/docs/en/api/csharp/beta/organization/federation/rules/list --- # List Federation Rules `RuleListPage Beta.Organization.Federation.Rules.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/federation_rules` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). List federation rules in your organization. Optionally filter by issuer with `issuer_id`. Archived rules are excluded unless `include_archived=true`. ## Parameters - `RuleListParams parameters` - `bool includeArchived` (query parameter) Include archived resources. Defaults to false. - `string? issuerID` (query parameter) Filter to rules referencing this federation issuer. - `long limit` (query parameter) Number of results per page. minimum: 1, maximum: 100 - `string? page` (query parameter) Opaque cursor from a previous response's `next_page`. - `IReadOnlyList betas` (header parameter) Optional header to specify the beta version(s) you want to use. - `MessageBatches2024_09_24("message-batches-2024-09-24")` - `PromptCaching2024_07_31("prompt-caching-2024-07-31")` - `ComputerUse2024_10_22("computer-use-2024-10-22")` - `ComputerUse2025_01_24("computer-use-2025-01-24")` - `Pdfs2024_09_25("pdfs-2024-09-25")` - `TokenCounting2024_11_01("token-counting-2024-11-01")` - `TokenEfficientTools2025_02_19("token-efficient-tools-2025-02-19")` - `Output128k2025_02_19("output-128k-2025-02-19")` - `FilesApi2025_04_14("files-api-2025-04-14")` - `McpClient2025_04_04("mcp-client-2025-04-04")` - `McpClient2025_11_20("mcp-client-2025-11-20")` - `DevFullThinking2025_05_14("dev-full-thinking-2025-05-14")` - `InterleavedThinking2025_05_14("interleaved-thinking-2025-05-14")` - `CodeExecution2025_05_22("code-execution-2025-05-22")` - `ExtendedCacheTtl2025_04_11("extended-cache-ttl-2025-04-11")` - `Context1m2025_08_07("context-1m-2025-08-07")` - `ContextManagement2025_06_27("context-management-2025-06-27")` - `ModelContextWindowExceeded2025_08_26("model-context-window-exceeded-2025-08-26")` - `Skills2025_10_02("skills-2025-10-02")` - `FastMode2026_02_01("fast-mode-2026-02-01")` - `Output300k2026_03_24("output-300k-2026-03-24")` - `UserProfiles2026_03_24("user-profiles-2026-03-24")` - `UserProfiles2026_08_18("user-profiles-2026-08-18")` - `UserProfiles2026_09_04("user-profiles-2026-09-04")` - `AdvisorTool2026_03_01("advisor-tool-2026-03-01")` - `ManagedAgents2026_04_01("managed-agents-2026-04-01")` - `CacheDiagnosis2026_04_07("cache-diagnosis-2026-04-07")` - `Dreaming2026_04_21("dreaming-2026-04-21")` - `ThinkingTokenCount2026_05_13("thinking-token-count-2026-05-13")` - `ServerSideFallback2026_06_01("server-side-fallback-2026-06-01")` - `ServerSideFallback2026_07_01("server-side-fallback-2026-07-01")` - `FallbackCredit2026_06_01("fallback-credit-2026-06-01")` - `FallbackCredit2026_07_01("fallback-credit-2026-07-01")` - `AgentMemory2026_07_22("agent-memory-2026-07-22")` - `MidConversationToolChanges2026_07_01("mid-conversation-tool-changes-2026-07-01")` - `Compact2026_01_12("compact-2026-01-12")` - `ComputerUse2025_11_24("computer-use-2025-11-24")` - `McpTunnels2026_06_22("mcp-tunnels-2026-06-22")` - `StructuredOutputs2025_11_13("structured-outputs-2025-11-13")` - `TaskBudgets2026_03_13("task-budgets-2026-03-13")` - `ThinkingDisplayUpdates2026_08_18("thinking-display-updates-2026-08-18")` - `CEUserManagement2026_07_13("ce-user-management-2026-07-13")` - `MidConversationOutputConfig2026_07_01("mid-conversation-output-config-2026-07-01")` - `ThinkingBindingControls2026_08_01("thinking-binding-controls-2026-08-01")` - `MidConversationSystemClearAt2026_08_21("mid-conversation-system-clear-at-2026-08-21")` - `Compact2026_09_04("compact-2026-09-04")` - `InlineTools2026_09_15("inline-tools-2026-09-15")` - `McpClient2026_09_15("mcp-client-2026-09-15")` - `CEPlugins2026_09_01("ce-plugins-2026-09-01")` - `SpendLimitReads2026_09_26("spend-limit-reads-2026-09-26")` - `TelemetryDestinations2026_08_11("telemetry-destinations-2026-08-11")` - `Webhooks2026_10_07("webhooks-2026-10-07")` - `MessageThreads2026_08_12("message-threads-2026-08-12")` - `AnalyticsUsageCost2026_08_24("analytics-usage-cost-2026-08-24")` - `ExperimentalClaudeTag2026_10_21("experimental-claude-tag-2026-10-21")` ## Returns - `class BetaFederationRule` Authorization rule binding an external OIDC identity to Anthropic. Evaluates the match conditions and mints an OAuth access token for the resolved target, scoped to a single workspace where the rule is enabled (chosen by the caller at exchange time when the rule is enabled for more than one). For rules enabled via `workspace_ids` or `applies_to_all_workspaces`, the target service account must be a member of that workspace (it is implicitly a member of the default workspace); rules carrying only the legacy `workspace_id` binding do not enforce this. - `JsonElement Type = "federation_rule"` - `required string ID` Tagged ID of the federation rule. - `required bool AppliesToAllWorkspaces` When true, this rule is enabled for every workspace in the org (including ones created after the rule). `workspace_ids` is ignored at exchange time. - `required DateTimeOffset? ArchivedAt` If set, this rule is archived and rejects token exchange. format: date-time - `required string? ArchivedByActorID` Tagged ID (`user_`/`svac_`) of the actor that archived this rule. - `required IReadOnlyDictionary? Attributes` CEL expressions extracting named values from claims. Not yet supported; always null. - `required DateTimeOffset CreatedAt` When this rule was created. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that created this rule. - `required string? Description` Optional free-text description. - `required string IssuerID` Tagged ID of the issuer whose tokens this rule accepts. - `required string? IssuerName` Issuer's display name at read time. - `required BetaFederationRuleMatch Match` Conditions the verified JWT must satisfy for this rule to apply. All populated matcher fields must pass. - `string? Audience` Exact match against the `aud` claim (any element if array). When omitted, the JWT's `aud` must still equal Anthropic's expected audience for the issuer; setting this field overrides that default. maxLength: 1024 - `IReadOnlyDictionary? Claims` Exact-match `{claim: value}` pairs against top-level claims. Only string-valued claims can be matched; use `condition` for non-string claims. - `string? Condition` CEL expression over claims for logic the structural fields can't express. Must evaluate to a boolean and may reference only the `claims` variable; a constant-true expression (such as `true`) is rejected with 400. maxLength: 4096 - `string? SubjectPrefix` Match the verified JWT `sub` claim. Exact match unless the value ends with `*`, in which case it is a prefix match. Example: `repo:my-org/my-repo:ref:refs/heads/main`. maxLength: 1024 - `required string Name` Admin-chosen slug identifier. - `required string OAuthScope` Space-separated OAuth scopes granted on the minted token. - `required BetaServiceAccountTarget Target` What this rule targets. Check `type` before reading the other fields. Tokens minted via a rule whose target `type` is `service_account` act as that service account. - `JsonElement Type = "service_account"` - `required string ServiceAccountID` Tagged ID of the service account to mint tokens for. - `string? ServiceAccountName` Service account's display name at read time. Ignored on writes. - `required long TokenLifetimeSeconds` Lifetime in seconds of access tokens minted via this rule. Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds. - `required DateTimeOffset UpdatedAt` When this rule was last updated. format: date-time - `required string? UpdatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that last updated this rule. - `required string? WorkspaceID` Legacy single-workspace binding. Prefer `workspace_ids` and the `/federation_rules/{federation_rule_id}/workspaces` sub-resource for managing workspace enablement. - `required IReadOnlyList WorkspaceIds` Tagged IDs of the workspaces this rule is enabled for. May be empty for older rules that only carry the legacy `workspace_id` binding. Ignored at exchange time when `applies_to_all_workspaces` is true (the list may still be non-empty). ## Example ```csharp using System; using Anthropic.Models.Beta.Organization.Federation.Rules; RuleListParams parameters = new(); var page = await client.Beta.Organization.Federation.Rules.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ### Response (200) ```json { "data": [ { "id": "fdrl_01SDCCSbTxrXDpWc1phhtcfK", "applies_to_all_workspaces": true, "archived_at": "2019-12-27T18:11:19.117Z", "archived_by_actor_id": "archived_by_actor_id", "attributes": { "foo": "string" }, "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "description": "description", "issuer_id": "issuer_id", "issuer_name": "issuer_name", "match": { "audience": "audience", "claims": { "foo": "string" }, "condition": "condition", "subject_prefix": "subject_prefix" }, "name": "prod-deploy-pipeline", "oauth_scope": "oauth_scope", "target": { "service_account_id": "svac_01SDCCSbTxrXDpWc1phhtcfK", "type": "service_account", "service_account_name": "service_account_name" }, "token_lifetime_seconds": 0, "type": "federation_rule", "updated_at": "2024-10-30T23:58:27.427722Z", "updated_by_actor_id": "updated_by_actor_id", "workspace_id": "workspace_id", "workspace_ids": [ "string" ] } ], "next_page": "next_page" } ```