簽發者

建立聯合簽發者

FederationIssuer Organization.Federation.Issuers.Create(parameters, cancellationToken = default)

POST/v1/organizations/federation_issuers

需要具有 org:admin 範圍的 OAuth 存取權杖，可透過 ant auth login --scope org:admin 或工作負載身分聯合（workload identity federation）規則取得；不接受 Admin API 金鑰。請參閱使用 Admin API 管理 WIF。

列出聯合簽發者

IssuerListPage Organization.Federation.Issuers.List(parameters, cancellationToken = default)

GET/v1/organizations/federation_issuers

取得聯合簽發者

FederationIssuer Organization.Federation.Issuers.Retrieve(parameters, cancellationToken = default)

GET/v1/organizations/federation_issuers/{federation_issuer_id}

更新聯合簽發者

FederationIssuer Organization.Federation.Issuers.Update(parameters, cancellationToken = default)

POST/v1/organizations/federation_issuers/{federation_issuer_id}

封存聯合簽發者

FederationIssuer Organization.Federation.Issuers.Archive(parameters, cancellationToken = default)

POST/v1/organizations/federation_issuers/{federation_issuer_id}/archive

Models

class FederationIssuer { Type = "federation_issuer"; ID; ArchivedAt; /* 12 more */ }

Registered external OIDC identity provider.

Records an external IdP the organization trusts for the RFC 7523 jwt-bearer grant. The issuer_url must match the JWT iss claim exactly.

class FederationIssuerPollStatus { ConsecutiveFailures; LastFetchedAt; NextPollAt; }

Status of automatic JWKS polling for a federation issuer.

Anthropic periodically fetches the issuer's signing keys in the background. These fields summarize the most recent fetches so the health of the JWKS endpoint can be monitored.

required long ConsecutiveFailures

Consecutive fetch failures since the last success.

required DateTimeOffset? LastFetchedAt

When the last successful fetch completed.

formatdate-time

required DateTimeOffset? NextPollAt

When the next fetch is scheduled. Null if paused.

formatdate-time

class JwksDiscovery { Type = "discovery"; CACertPem; DiscoveryBase; }

JWKS via the issuer's OIDC discovery document.

JsonElement Type = "discovery"

string? CACertPem

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

maxLength8192

string? DiscoveryBase

Set when the discovery URL differs from issuer_url.

class JwksExplicitUrl { Type = "explicit_url"; Url; CACertPem; }

JWKS fetched from a fixed endpoint.

JsonElement Type = "explicit_url"

required string Url

JWKS endpoint.

minLength1

string? CACertPem

Optional custom CA (PEM) for TLS verification of the JWKS fetch.

maxLength8192

class JwksInline { Type = "inline"; Keys; }

JWKS supplied directly; no network fetch.

JsonElement Type = "inline"

required IReadOnlyList<IReadOnlyDictionary<string, JsonElement>> Keys

Inline JWK objects.

minItems1