Sign in

Get Federation Issuer

Requires an OAuth access token with the org:admin scope, from ant auth login --scope org:admin or a workload identity federation rule; Admin API keys are not accepted. See Manage WIF with the Admin API.

Retrieve a federation issuer by its ID (fdis_...).

get/v1/organizations/federation_issuers/{federation_issuer_id}?beta=true

Path parameters

federation_issuer_idstring required

ID of the federation issuer.

ID of the federation issuer.

Headers

anthropic-betastring

Optional header to specify the beta version(s) you want to use.

To use multiple betas, use a comma separated list like beta1,beta2 or specify the header multiple times for each beta.

Optional header to specify the beta version(s) you want to use.

To use multiple betas, use a comma separated list like beta1,beta2 or specify the header multiple times for each beta.

x-api-keystring

Your unique Admin API key for authentication.

This key is required in the header of all Admin API requests, to authenticate your account and access Anthropic's services. Get your Admin API key through the Console.

Your unique Admin API key for authentication.

This key is required in the header of all Admin API requests, to authenticate your account and access Anthropic's services. Get your Admin API key through the Console.

anthropic-versionstring

The version of the Claude API you want to use.

Read more about versioning and our version history here.

The version of the Claude API you want to use.

Read more about versioning and our version history here.

Response

Successful Response

archived_atstring date-time nullable required

If set, all rules referencing this issuer reject token exchange.

archived_by_actor_idstring nullable required

Tagged ID (user_/svac_) of the actor that archived this issuer.

check_jtiboolean required

Whether the jwt-bearer exchange enforces JTI single-use (replay protection) for tokens from this issuer. Applies only to assertions carrying a jti claim; tokens without one are accepted without single-use enforcement.

created_atstring date-time required

When this issuer was created.

created_by_actor_idstring nullable required

Tagged ID (user_/svac_) of the actor that created this issuer.

idstring required

Tagged ID of the federation issuer.

issuer_urlstring required

The iss claim value. Incoming JWTs must match exactly.

jwks_polling_disabled_atstring date-time nullable required

If set, Anthropic's JWKS poller has paused polling for this issuer after repeated fetch failures. Re-enable by sending jwks_polling_disabled: false via the issuer update endpoint (POST) once the upstream JWKS endpoint is fixed. An OAuth caller cannot send this when the issuer backs a rule with any scope other than workspace:developer or workspace:inference; use a Console session.

max_jwt_lifetime_secondsinteger required

Maximum allowed iat→exp spread for assertions from this issuer (1-176400 seconds, i.e. up to 49h). Assertions must carry both iat and exp; a missing iat is rejected.

namestring required

Admin-chosen slug identifier.

type'federation_issuer' required
updated_atstring date-time required

When this issuer was last updated.

updated_by_actor_idstring nullable required

Tagged ID (user_/svac_) of the actor that last updated this issuer.

Example response

{
  "created_at": "2024-10-30T23:58:27.427722Z",
  "id": "fdis_01SDCCSbTxrXDpWc1phhtcfK",
  "issuer_url": "https://token.actions.githubusercontent.com",
  "name": "github-actions",
  "updated_at": "2024-10-30T23:58:27.427722Z"
}

Changes