Claude Platform adds keyless OIDC auth
Anthropic added Workload Identity Federation to Claude Platform, so workloads can authenticate with short-lived OIDC tokens from AWS, GCP, Azure, Kubernetes, GitHub Actions, or other identity providers instead of static API keys. The same direction also simplifies CLI sign-in and reduces secret management across Claude Code and the SDKs.
This is a security-first upgrade that moves Claude closer to cloud-native auth patterns developers already use elsewhere, which should matter more to teams running CI, batch jobs, and internal agents than a cosmetic API tweak.
- –Removes long-lived keys from the highest-risk path: CI, automation, and service-to-service calls
- –Fits common enterprise identity stacks, so adoption should be easier than inventing another secrets workflow
- –Makes Claude Code and SDK auth feel like infrastructure, not a special-case developer exception
- –The real win is operational: fewer rotated secrets, fewer leaks, and cleaner auditability for machine identities
- –Anthropic is signaling that platform maturity now includes identity and access plumbing, not just model quality
DISCOVERED
45d ago
2026-05-04
PUBLISHED
45d ago
2026-05-04
RELEVANCE
AUTHOR
ClaudeDevs