Claude Platform Docs

フェデレーション発行者を作成

client.Organization.Federation.Issuers.New(ctx, body) (*FederationIssuer, error)
POST/v1/organizations/federation_issuers

org:adminスコープを持つOAuthアクセストークンが必要です。このトークンはant auth login --scope org:adminまたはワークロードアイデンティティフェデレーションルールから取得します。Admin APIキーは受け付けられません。Admin APIでWIFを管理するを参照してください。

組織内のワークロードアイデンティティフェデレーションでAnthropicが信頼する OIDC発行者を登録します。

jwksフィールドは発行者の署名キーの取得方法を制御し、typeで選択される 3つの形式のいずれかを取ります：discovery（OIDCディスカバリーを通じてキーを解決）、 explicit_url（固定のJWKS URLからキーを取得）、またはinline（静的なキーセットを提供）。 jwks.typeがdiscoveryでdiscovery_baseが設定されていない場合、Anthropicが ディスカバリードキュメントを取得できるよう、発行者URLはHTTPS経由で公開アクセス可能である 必要があります。explicit_urlおよびinlineモードでは、発行者URLはJWTのissクレームとの 照合にのみ使用され、取得されることはありません。

Parameters
body OrganizationFederationIssuerNewParams
IssuerURL string

The iss claim value to match against.

minLength1
Name string

Slug identifier (lowercase, digits, hyphens). Unique within the organization; a duplicate name returns 409.

minLength1
maxLength255
CheckJTI param.Opt[bool] Optional

Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for tokens from this issuer. Defaults to true. Applies only to assertions carrying a jti claim; tokens without one are accepted without single-use enforcement.

JWKS OrganizationFederationIssuerNewParamsJWKSUnion Optional

How signing keys are obtained. Defaults to OIDC discovery.

type JWKSDiscovery struct { Type: "discovery"; CACertPEM; DiscoveryBase }

JWKS via the issuer's OIDC discovery document.

Type Discovery
CACertPEM string Optional

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

maxLength8192
DiscoveryBase string Optional

Set when the discovery URL differs from issuer_url.

type JWKSExplicitURL struct { Type: "explicit_url"; URL; CACertPEM }

JWKS fetched from a fixed endpoint.

Type ExplicitURL
URL string

JWKS endpoint.

minLength1
CACertPEM string Optional

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

maxLength8192
type JWKSInline struct { Type: "inline"; Keys }

JWKS supplied directly; no network fetch.

Type Inline
Keys []map[string, any]

Inline JWK objects.

minItems1
MaxJWTLifetimeSeconds param.Opt[int64] Optional

Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Defaults to 3600 (1h). Assertions must carry both iat and exp; a missing iat is rejected.

minimum1
maximum176400
Returns
type FederationIssuer struct { Type: "federation_issuer"; ID; ArchivedAt; /* 12 more */ }

Registered external OIDC identity provider.

Records an external IdP the organization trusts for the RFC 7523 jwt-bearer grant. The issuer_url must match the JWT iss claim exactly.

フェデレーション発行者を作成
package main

import (
	"context"
	"fmt"

	"github.com/anthropics/anthropic-sdk-go"
	"github.com/anthropics/anthropic-sdk-go/option"
)

func main() {
	client := anthropic.NewClient(
		option.WithAPIKey("my-anthropic-api-key"),
	)
	federationIssuer, err := client.Organization.Federation.Issuers.New(context.TODO(), anthropic.OrganizationFederationIssuerNewParams{
		IssuerURL: "x",
		Name:      "x",
	})
	if err != nil {
		panic(err.Error())
	}
	fmt.Printf("%+v\n", federationIssuer.ID)
}
Returns Examples
Response 200
{
  "id": "fdis_01SDCCSbTxrXDpWc1phhtcfK",
  "archived_at": "2019-12-27T18:11:19.117Z",
  "archived_by_actor_id": "archived_by_actor_id",
  "check_jti": true,
  "created_at": "2024-10-30T23:58:27.427722Z",
  "created_by_actor_id": "created_by_actor_id",
  "issuer_url": "https://token.actions.githubusercontent.com",
  "jwks": {
    "type": "discovery",
    "ca_cert_pem": "ca_cert_pem",
    "discovery_base": "discovery_base"
  },
  "jwks_polling_disabled_at": "2019-12-27T18:11:19.117Z",
  "max_jwt_lifetime_seconds": 0,
  "name": "github-actions",
  "poll_status": {
    "consecutive_failures": 0,
    "last_fetched_at": "2019-12-27T18:11:19.117Z",
    "next_poll_at": "2019-12-27T18:11:19.117Z"
  },
  "type": "federation_issuer",
  "updated_at": "2024-10-30T23:58:27.427722Z",
  "updated_by_actor_id": "updated_by_actor_id"
}