Claude Platform Docs

Mettre à jour un émetteur de fédération

client.Organization.Federation.Issuers.Update(ctx, federationIssuerID, body) (*FederationIssuer, error)
POST/v1/organizations/federation_issuers/{federation_issuer_id}

Nécessite un jeton d'accès OAuth avec la portée org:admin, obtenu via ant auth login --scope org:admin ou une règle de workload identity federation (fédération d'identité de charge de travail) ; les clés Admin API ne sont pas acceptées. Consultez Gérer WIF avec l'Admin API.

Mettez à jour partiellement un émetteur de fédération.

Définir jwks remplace l'intégralité de la forme JWKS en une seule fois. Les émetteurs archivés ne peuvent pas être mis à jour ; cela renvoie 400. Créez plutôt un nouvel émetteur.

La mise à jour d'un émetteur qui sous-tend une règle dont la portée est en dehors de workspace:developer ou workspace:inference nécessite une session Console.

Parameters
federationIssuerID string⁠Path parameter

ID of the federation issuer to update.

body OrganizationFederationIssuerUpdateParams
CheckJTI param.Opt[bool] Optional

Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for tokens from this issuer. Applies only to assertions carrying a jti claim; tokens without one are accepted without single-use enforcement.

IssuerURL param.Opt[string] Optional

Replaces the iss claim value to match against. For discovery-mode issuers without a discovery_base, this is also the URL Anthropic fetches the OIDC discovery document and signing keys from, so changing it repoints the JWKS source. Changing the issuer URL to a well-known shared platform is rejected while any live rule under this issuer would not constrain tenant identity.

minLength1
JWKS OrganizationFederationIssuerUpdateParamsJWKSUnion Optional

Replaces the entire JWKS configuration.

type JWKSDiscovery struct { Type: "discovery"; CACertPEM; DiscoveryBase }

JWKS via the issuer's OIDC discovery document.

Type Discovery
CACertPEM string Optional

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

maxLength8192
DiscoveryBase string Optional

Set when the discovery URL differs from issuer_url.

type JWKSExplicitURL struct { Type: "explicit_url"; URL; CACertPEM }

JWKS fetched from a fixed endpoint.

Type ExplicitURL
URL string

JWKS endpoint.

minLength1
CACertPEM string Optional

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

maxLength8192
type JWKSInline struct { Type: "inline"; Keys }

JWKS supplied directly; no network fetch.

Type Inline
Keys []map[string, any]

Inline JWK objects.

minItems1
JWKSPollingDisabled param.Opt[bool] Optional

Only false is accepted, to re-enable polling after the system pauses it. Polling is paused automatically; sending true is rejected.

MaxJWTLifetimeSeconds param.Opt[int64] Optional

Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Assertions must carry both iat and exp; a missing iat is rejected.

minimum1
maximum176400
Name param.Opt[string] Optional

Replaces the slug identifier (lowercase, digits, hyphens). Unique within the organization; a duplicate name returns 409.

minLength1
maxLength255
Returns
type FederationIssuer struct { Type: "federation_issuer"; ID; ArchivedAt; /* 12 more */ }

Registered external OIDC identity provider.

Records an external IdP the organization trusts for the RFC 7523 jwt-bearer grant. The issuer_url must match the JWT iss claim exactly.

Mettre à jour un émetteur de fédération
package main

import (
	"context"
	"fmt"

	"github.com/anthropics/anthropic-sdk-go"
	"github.com/anthropics/anthropic-sdk-go/option"
)

func main() {
	client := anthropic.NewClient(
		option.WithAPIKey("my-anthropic-api-key"),
	)
	federationIssuer, err := client.Organization.Federation.Issuers.Update(
		context.TODO(),
		"federation_issuer_id",
		anthropic.OrganizationFederationIssuerUpdateParams{},
	)
	if err != nil {
		panic(err.Error())
	}
	fmt.Printf("%+v\n", federationIssuer.ID)
}
Returns Examples
Response 200
{
  "id": "fdis_01SDCCSbTxrXDpWc1phhtcfK",
  "archived_at": "2019-12-27T18:11:19.117Z",
  "archived_by_actor_id": "archived_by_actor_id",
  "check_jti": true,
  "created_at": "2024-10-30T23:58:27.427722Z",
  "created_by_actor_id": "created_by_actor_id",
  "issuer_url": "https://token.actions.githubusercontent.com",
  "jwks": {
    "type": "discovery",
    "ca_cert_pem": "ca_cert_pem",
    "discovery_base": "discovery_base"
  },
  "jwks_polling_disabled_at": "2019-12-27T18:11:19.117Z",
  "max_jwt_lifetime_seconds": 0,
  "name": "github-actions",
  "poll_status": {
    "consecutive_failures": 0,
    "last_fetched_at": "2019-12-27T18:11:19.117Z",
    "next_poll_at": "2019-12-27T18:11:19.117Z"
  },
  "type": "federation_issuer",
  "updated_at": "2024-10-30T23:58:27.427722Z",
  "updated_by_actor_id": "updated_by_actor_id"
}