--- title: List Federation Rules url: https://platform.claude.com/docs/en/api/csharp/organization/federation/rules/list --- # List Federation Rules `RuleListPage Organization.Federation.Rules.List(parameters, cancellationToken = default)` **GET** `/v1/organizations/federation_rules` **Requires an OAuth access token with the `org:admin` scope**, from `ant auth login --scope org:admin` or a workload identity federation rule; Admin API keys are not accepted. See [Manage WIF with the Admin API](https://platform.claude.com/docs/en/manage-claude/wif-admin-api?sdk_languages=csharp). List federation rules in your organization. Optionally filter by issuer with `issuer_id`. Archived rules are excluded unless `include_archived=true`. ## Parameters - `RuleListParams parameters` - `bool includeArchived` (query parameter) Include archived resources. Defaults to false. - `string? issuerID` (query parameter) Filter to rules referencing this federation issuer. - `long limit` (query parameter) Number of results per page. minimum: 1, maximum: 100 - `string? page` (query parameter) Opaque cursor from a previous response's `next_page`. ## Returns - `class FederationRule` Authorization rule binding an external OIDC identity to Anthropic. Evaluates the match conditions and mints an OAuth access token for the resolved target, scoped to a single workspace where the rule is enabled (chosen by the caller at exchange time when the rule is enabled for more than one). For rules enabled via `workspace_ids` or `applies_to_all_workspaces`, the target service account must be a member of that workspace (it is implicitly a member of the default workspace); rules carrying only the legacy `workspace_id` binding do not enforce this. - `JsonElement Type = "federation_rule"` - `required string ID` Tagged ID of the federation rule. - `required bool AppliesToAllWorkspaces` When true, this rule is enabled for every workspace in the org (including ones created after the rule). `workspace_ids` is ignored at exchange time. - `required DateTimeOffset? ArchivedAt` If set, this rule is archived and rejects token exchange. format: date-time - `required string? ArchivedByActorID` Tagged ID (`user_`/`svac_`) of the actor that archived this rule. - `required DateTimeOffset CreatedAt` When this rule was created. format: date-time - `required string? CreatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that created this rule. - `required string? Description` Optional free-text description. - `required string IssuerID` Tagged ID of the issuer whose tokens this rule accepts. - `required string? IssuerName` Issuer's display name at read time. - `required FederationRuleMatch Match` Conditions the verified JWT must satisfy for this rule to apply. All populated matcher fields must pass. - `string? Audience` Exact match against the `aud` claim (any element if array). When omitted, the JWT's `aud` must still equal Anthropic's expected audience for the issuer; setting this field overrides that default. maxLength: 1024 - `IReadOnlyDictionary? Claims` Exact-match `{claim: value}` pairs against top-level claims. Only string-valued claims can be matched; use `condition` for non-string claims. - `string? Condition` CEL expression over claims for logic the structural fields can't express. Must evaluate to a boolean and may reference only the `claims` variable; a constant-true expression (such as `true`) is rejected with 400. maxLength: 4096 - `string? SubjectPrefix` Match the verified JWT `sub` claim. Exact match unless the value ends with `*`, in which case it is a prefix match. Example: `repo:my-org/my-repo:ref:refs/heads/main`. maxLength: 1024 - `required string Name` Admin-chosen slug identifier. - `required string OAuthScope` Space-separated OAuth scopes granted on the minted token. - `required ServiceAccountTarget Target` What this rule targets. Check `type` before reading the other fields. Tokens minted via a rule whose target `type` is `service_account` act as that service account. - `JsonElement Type = "service_account"` - `required string ServiceAccountID` Tagged ID of the service account to mint tokens for. - `string? ServiceAccountName` Service account's display name at read time. Ignored on writes. - `required long TokenLifetimeSeconds` Lifetime in seconds of access tokens minted via this rule. Minted tokens are capped at `max(60, min(this value, 2 × remaining assertion validity))` seconds. - `required DateTimeOffset UpdatedAt` When this rule was last updated. format: date-time - `required string? UpdatedByActorID` Tagged ID (`user_`/`svac_`) of the actor that last updated this rule. - `required IReadOnlyList WorkspaceIds` Tagged IDs of the workspaces this rule is enabled for. May be empty for older rules that only carry the legacy `workspace_id` binding. Ignored at exchange time when `applies_to_all_workspaces` is true (the list may still be non-empty). ## Example ```csharp using System; using Anthropic.Models.Organization.Federation.Rules; RuleListParams parameters = new(); var page = await client.Organization.Federation.Rules.List(parameters); await foreach (var item in page.Paginate()) { Console.WriteLine(item); } ``` ### Response (200) ```json { "data": [ { "id": "fdrl_01SDCCSbTxrXDpWc1phhtcfK", "applies_to_all_workspaces": true, "archived_at": "2019-12-27T18:11:19.117Z", "archived_by_actor_id": "archived_by_actor_id", "attributes": { "foo": "string" }, "created_at": "2024-10-30T23:58:27.427722Z", "created_by_actor_id": "created_by_actor_id", "description": "description", "issuer_id": "issuer_id", "issuer_name": "issuer_name", "match": { "audience": "audience", "claims": { "foo": "string" }, "condition": "condition", "subject_prefix": "subject_prefix" }, "name": "prod-deploy-pipeline", "oauth_scope": "oauth_scope", "target": { "service_account_id": "svac_01SDCCSbTxrXDpWc1phhtcfK", "type": "service_account", "service_account_name": "service_account_name" }, "token_lifetime_seconds": 0, "type": "federation_rule", "updated_at": "2024-10-30T23:58:27.427722Z", "updated_by_actor_id": "updated_by_actor_id", "workspace_id": "workspace_id", "workspace_ids": [ "string" ] } ], "next_page": "next_page" } ```