颁发者

创建联合颁发者

client.Beta.Organization.Federation.Issuers.New(ctx, params) (*BetaFederationIssuer, error)

POST/v1/organizations/federation_issuers

需要具有 org:admin 作用域的 OAuth 访问令牌，可通过 ant auth login --scope org:admin 或工作负载身份联合规则获取；不接受 Admin API 密钥。请参阅使用 Admin API 管理 WIF。

列出联合颁发者

client.Beta.Organization.Federation.Issuers.List(ctx, params) (*PageCursor[BetaFederationIssuer], error)

GET/v1/organizations/federation_issuers

获取联合颁发者

client.Beta.Organization.Federation.Issuers.Get(ctx, federationIssuerID, query) (*BetaFederationIssuer, error)

GET/v1/organizations/federation_issuers/{federation_issuer_id}

更新联合颁发者

client.Beta.Organization.Federation.Issuers.Update(ctx, federationIssuerID, params) (*BetaFederationIssuer, error)

POST/v1/organizations/federation_issuers/{federation_issuer_id}

归档联合颁发者

client.Beta.Organization.Federation.Issuers.Archive(ctx, federationIssuerID, body) (*BetaFederationIssuer, error)

POST/v1/organizations/federation_issuers/{federation_issuer_id}/archive

Models

type BetaFederationIssuer struct { Type: "federation_issuer"; ID; ArchivedAt; /* 12 more */ }

Registered external OIDC identity provider.

Records an external IdP the organization trusts for the RFC 7523 jwt-bearer grant. The issuer_url must match the JWT iss claim exactly.

type BetaFederationIssuerPollStatus struct { ConsecutiveFailures; LastFetchedAt; NextPollAt }

Status of automatic JWKS polling for a federation issuer.

Anthropic periodically fetches the issuer's signing keys in the background. These fields summarize the most recent fetches so the health of the JWKS endpoint can be monitored.

ConsecutiveFailures int64

Consecutive fetch failures since the last success.

LastFetchedAt Time

When the last successful fetch completed.

formatdate-time

NextPollAt Time

When the next fetch is scheduled. Null if paused.

formatdate-time

type BetaJWKSDiscovery struct { Type: "discovery"; CACertPEM; DiscoveryBase }

JWKS via the issuer's OIDC discovery document.

Type Discovery

CACertPEM string Optional

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

maxLength8192

DiscoveryBase string Optional

Set when the discovery URL differs from issuer_url.

type BetaJWKSExplicitURL struct { Type: "explicit_url"; URL; CACertPEM }

JWKS fetched from a fixed endpoint.

Type ExplicitURL

URL string

JWKS endpoint.

minLength1

CACertPEM string Optional

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

maxLength8192

type BetaJWKSInline struct { Type: "inline"; Keys }

JWKS supplied directly; no network fetch.

Type Inline

Keys []map[string, any]

Inline JWK objects.

minItems1