규칙

페더레이션 규칙 생성

$client->organization->federation->rules->create(string issuerID, FederationRuleMatch match, string name, string oauthScope, ServiceAccountTarget target, ?bool appliesToAllWorkspaces, ?string description, ?int tokenLifetimeSeconds, ?string workspaceID): FederationRule

POST/v1/organizations/federation_rules

org:admin 범위가 있는 OAuth 액세스 토큰이 필요합니다. 이 토큰은 ant auth login --scope org:admin 또는 워크로드 ID 페더레이션 규칙에서 얻을 수 있으며, Admin API 키는 허용되지 않습니다. Admin API로 WIF 관리를 참조하세요.

페더레이션 규칙 목록 조회

$client->organization->federation->rules->list(?bool includeArchived, ?string issuerID, ?int limit, ?string page): PageCursor<FederationRule>

GET/v1/organizations/federation_rules

페더레이션 규칙 조회

$client->organization->federation->rules->retrieve(string federationRuleID): FederationRule

GET/v1/organizations/federation_rules/{federation_rule_id}

페더레이션 규칙 업데이트

$client->organization->federation->rules->update(string federationRuleID, ?bool appliesToAllWorkspaces, ?string description, ?FederationRuleMatch match, ?string name, ?string oauthScope, ?ServiceAccountTarget target, ?int tokenLifetimeSeconds, ?string workspaceID): FederationRule

POST/v1/organizations/federation_rules/{federation_rule_id}

org:admin 범위의 OAuth 액세스 토큰이 필요합니다. 이 토큰은 ant auth login --scope org:admin 또는 워크로드 ID 페더레이션 규칙을 통해 얻을 수 있으며, Admin API 키는 허용되지 않습니다. Admin API로 WIF 관리를 참조하세요.

페더레이션 규칙 보관

$client->organization->federation->rules->archive(string federationRuleID): FederationRule

POST/v1/organizations/federation_rules/{federation_rule_id}/archive

Models

class FederationRule { $type = 'federation_rule'; $id; $appliesToAllWorkspaces; /* 15 more */ }

class FederationRuleMatch { $audience; $claims; $condition; $subjectPrefix; }

?string audience

Exact match against the aud claim (any element if array). When omitted, the JWT's aud must still equal Anthropic's expected audience for the issuer; setting this field overrides that default.

?array<string,string> claims

Exact-match {claim: value} pairs against top-level claims. Only string-valued claims can be matched; use condition for non-string claims.

?string condition

CEL expression over claims for logic the structural fields can't express. Must evaluate to a boolean and may reference only the claims variable; a constant-true expression (such as true) is rejected with 400.

?string subjectPrefix

Match the verified JWT sub claim. Exact match unless the value ends with *, in which case it is a prefix match. Example: repo:my-org/my-repo:ref:refs/heads/main.

class FederationRuleWorkspace { $type = 'federation_rule_workspace'; $createdAt; $createdByActorID; /* 3 more */ }

"federation_rule_workspace" type

\Datetime createdAt

When this workspace was enabled for the rule.

?string createdByActorID

Tagged ID (user_... or svac_...) of the actor that enabled this workspace for the rule, if known.

string federationRuleID

Tagged ID of the federation rule.

string workspaceID

Tagged ID of the workspace this rule is enabled for.

?string workspaceName

Workspace display name. Populated when listing; null in the enable response.

class ServiceAccountTarget { $type = 'service_account'; $serviceAccountID; $serviceAccountName; }

"service_account" type

string serviceAccountID

Tagged ID of the service account to mint tokens for.

?string serviceAccountName

Service account's display name at read time. Ignored on writes.

규칙

페더레이션 규칙 생성

페더레이션 규칙 목록 조회

페더레이션 규칙 조회

페더레이션 규칙 업데이트

페더레이션 규칙 보관

Models

규칙워크스페이스

페더레이션 규칙 워크스페이스 추가

페더레이션 규칙 워크스페이스 목록 조회

페더레이션 규칙 워크스페이스 제거

규칙

Models

규칙워크스페이스

규칙워크스페이스