Émetteurs

Créer un émetteur de fédération

FederationIssuer organization().federation().issuers().create(params, requestOptions = RequestOptions.none())

POST/v1/organizations/federation_issuers

Nécessite un jeton d'accès OAuth avec la portée org:admin, obtenu via ant auth login --scope org:admin ou une règle de workload identity federation (fédération d'identité de charge de travail) ; les clés Admin API ne sont pas acceptées. Consultez Gérer WIF avec l'Admin API.

Lister les émetteurs de fédération

IssuerListPage organization().federation().issuers().list(params = IssuerListParams.none(), requestOptions = RequestOptions.none())

GET/v1/organizations/federation_issuers

Obtenir un émetteur de fédération

FederationIssuer organization().federation().issuers().retrieve(params = IssuerRetrieveParams.none(), requestOptions = RequestOptions.none())

GET/v1/organizations/federation_issuers/{federation_issuer_id}

Mettre à jour un émetteur de fédération

FederationIssuer organization().federation().issuers().update(params = IssuerUpdateParams.none(), requestOptions = RequestOptions.none())

POST/v1/organizations/federation_issuers/{federation_issuer_id}

Archiver un émetteur de fédération

FederationIssuer organization().federation().issuers().archive(params = IssuerArchiveParams.none(), requestOptions = RequestOptions.none())

POST/v1/organizations/federation_issuers/{federation_issuer_id}/archive

Models

class FederationIssuer { type = "federation_issuer"; id; archivedAt; /* 12 more */ }

Registered external OIDC identity provider.

Records an external IdP the organization trusts for the RFC 7523 jwt-bearer grant. The issuer_url must match the JWT iss claim exactly.

class FederationIssuerPollStatus { consecutiveFailures; lastFetchedAt; nextPollAt; }

Status of automatic JWKS polling for a federation issuer.

Anthropic periodically fetches the issuer's signing keys in the background. These fields summarize the most recent fetches so the health of the JWKS endpoint can be monitored.

long consecutiveFailures

Consecutive fetch failures since the last success.

Optional<LocalDateTime> lastFetchedAt

When the last successful fetch completed.

formatdate-time

Optional<LocalDateTime> nextPollAt

When the next fetch is scheduled. Null if paused.

formatdate-time

class JwksDiscovery { type = "discovery"; caCertPem; discoveryBase; }

JWKS via the issuer's OIDC discovery document.

JsonValue type = "discovery"

Optional<String> caCertPem

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

maxLength8192

Optional<String> discoveryBase

Set when the discovery URL differs from issuer_url.

class JwksExplicitUrl { type = "explicit_url"; url; caCertPem; }

JWKS fetched from a fixed endpoint.

JsonValue type = "explicit_url"

String url

JWKS endpoint.

minLength1

Optional<String> caCertPem

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

maxLength8192

class JwksInline { type = "inline"; keys; }

JWKS supplied directly; no network fetch.

JsonValue type = "inline"

List<Key> keys

Inline JWK objects.

minItems1