SpyBara
Go Premium

authentication.md 2026-02-01 21:03 UTC to 2026-02-03 21:08 UTC

104 added, 0 removed.

2026
Sat 28 21:01 Fri 27 21:05 Thu 26 21:08 Wed 25 03:47 Tue 24 21:08 Mon 23 21:13 Sat 21 18:03 Fri 20 21:03 Thu 19 21:06 Wed 18 03:48 Tue 17 21:08 Mon 16 21:05 Sat 14 03:44 Fri 13 21:09 Thu 12 00:06 Wed 11 21:10 Tue 10 21:13 Mon 9 15:17 Sat 7 21:05 Fri 6 21:06 Thu 5 21:06 Wed 4 21:07 Tue 3 21:08 Sun 1 21:03

Authentication

Learn how to configure user authentication and credential management for Claude Code in your organization.

Authentication methods

Setting up Claude Code requires access to Anthropic models. For teams, you can set up Claude Code access in one of these ways:

Claude for Teams or Enterprise

Claude for Teams and Claude for Enterprise provide the best experience for organizations using Claude Code. Team members get access to both Claude Code and Claude on the web with centralized billing and team management.

  • Claude for Teams: self-service plan with collaboration features, admin tools, and billing management. Best for smaller teams.
  • Claude for Enterprise: adds SSO, domain capture, role-based permissions, compliance API, and managed policy settings for organization-wide Claude Code configurations. Best for larger organizations with security and compliance requirements.
1

Subscribe

Subscribe to Claude for Teams or contact sales for Claude for Enterprise.

2

Invite team members

Invite team members from the admin dashboard.

3

Install and log in

Team members install Claude Code and log in with their Claude.ai accounts.

Claude Console authentication

For organizations that prefer API-based billing, you can set up access through the Claude Console.

1

Create or use a Console account

Use your existing Claude Console account or create a new one.

2

Add users

You can add users through either method:

  • Bulk invite users from within the Console (Console -> Settings -> Members -> Invite)
  • Set up SSO
3

Assign roles

When inviting users, assign one of:

  • Claude Code role: users can only create Claude Code API keys
  • Developer role: users can create any kind of API key
4

Users complete setup

Each invited user needs to:

Cloud provider authentication

For teams using Amazon Bedrock, Google Vertex AI, or Microsoft Azure:

1

Follow provider setup

Follow the Bedrock docs, Vertex docs, or Microsoft Foundry docs.

2

Distribute configuration

Distribute the environment variables and instructions for generating cloud credentials to your users. Read more about how to manage configuration here.

3

Install Claude Code

Users can install Claude Code.

Credential management

Claude Code securely manages your authentication credentials:

  • Storage location: on macOS, API keys, OAuth tokens, and other credentials are stored in the encrypted macOS Keychain.
  • Supported authentication types: Claude.ai credentials, Claude API credentials, Azure Auth, Bedrock Auth, and Vertex Auth.
  • Custom credential scripts: the apiKeyHelper setting can be configured to run a shell script that returns an API key.
  • Refresh intervals: by default, apiKeyHelper is called after 5 minutes or on HTTP 401 response. Set CLAUDE_CODE_API_KEY_HELPER_TTL_MS environment variable for custom refresh intervals.

See also

  • Permissions: configure what Claude Code can access and do
  • Settings: complete configuration reference
  • Security: security safeguards and best practices