Back
AI summary
Written by AI from the official notes. Check them for exact details.Anthropic has introduced Workload Identity Federation for authenticating workloads to the Claude API.
- Authenticate with short-lived OIDC tokens instead of static API keys.
- Supports multiple identity providers like AWS IAM and Google Cloud.
- Automatic token exchange and refresh handled by the SDK.
- Configuration of issuers and federation rules in the Claude Console.
Why it matters: Developers and organizations using Claude API should adopt this for enhanced security and easier management.
Full release notes
- We've launched Workload Identity Federation. Authenticate workloads to the Claude API with short-lived OIDC tokens from your own identity provider (AWS IAM, Google Cloud, GitHub Actions, Kubernetes, Microsoft Entra ID, Okta, SPIFFE, and more) instead of long-lived static API keys. Configure issuers and federation rules in the Claude Console, and the SDK handles token exchange and refresh automatically. See Authentication.