Observed Signal · Jul 5, 2026 · Technical Release · Source: DEV Community · Impact: 2/5 · Sentiment: Positive
Anthropic replaces per-developer Claude Code keys with OIDC gateway
Anthropic released a self-hosted gateway for enterprises running Claude Code on Amazon Bedrock or Google Cloud that replaces long-lived per-developer secrets with short-lived OIDC sessions. The gateway is implemented as a single stateless container backed by a PostgreSQL database and acts as an OpenID Connect relying party, federating sign-in through existing identity providers (Google Workspace, Microsoft Entra ID, Okta, or any standards-compliant OIDC issuer). It centralizes identity, policy enforcement, usage tracking and spend management for Claude Code, enabling revocation via the IdP rather than cloud IAM. The change aligns coding agents with existing workload identity federation patterns used for CI runners, while shifting the operational state to the gateway’s backing database.
This is a product release improving enterprise security and operational control for coding agents by shifting from long-lived developer keys to federated short-lived sessions; useful for platform and security teams but not industry-shifting.
Track Anthropic Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- Anthropic introduced a self-hosted Claude apps gateway for enterprises running Claude Code on Amazon Bedrock or Google Cloud.
- The gateway is a single stateless container backed by a PostgreSQL database and functions as an OpenID Connect relying party.
- The gateway federates sign-in through existing identity providers such as Google Workspace, Microsoft Entra ID, and Okta.
- Short-lived sessions issued by the gateway replace long-lived per-developer credentials previously stored on developer machines.
- The gateway centralizes identity, policy enforcement, usage tracking, and spend management for Claude Code.
Connected Companies & Entities
5 Entities mapped“On July 1, DevOps.com (byline Tom Smith) reported that Anthropic has introduced a self-hosted Claude apps gateway for enterprises running Cl...”
“It federates sign-in through whichever IdP you already run: Google Workspace, Microsoft Entra ID, Okta, or any standards-compliant OIDC prov...”
“On July 1, DevOps.com (byline Tom Smith) reported that Anthropic has introduced a self-hosted Claude apps gateway for enterprises running Cl...”
“It federates sign-in through whichever IdP you already run: Google Workspace, Microsoft Entra ID, Okta, or any standards-compliant OIDC prov...”
“It federates sign-in through whichever IdP you already run: Google Workspace, Microsoft Entra ID, Okta, or any standards-compliant OIDC prov...”
Ontology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Self-hosted Gateway Restores Claude Code Features on Bedrock
The article compares running Anthropic's Claude Code via Anthropic's API, Amazon Bedrock, or a proxy/gateway and explains trade-offs between data sovereignty, region/control, security integration and pricing. Bedrock integration disables some Claude Code client-side features (extended thinking, web search, partial tool use). The author introduces an open-source project — Claude Code AWS Gateway (CCAG) — a self-hosted Rust binary with Postgres (MIT license) that presents an Anthropic Messages API to Claude Code and translates requests to Bedrock, restoring disabled features. CCAG adds team-management capabilities (budget controls, OIDC SSO, multi-account/region routing, admin portal, SCIM 2.0) and can be run via Docker Compose or deployed to AWS (CDK, ECS Fargate + RDS). The post also notes limitations: CCAG is new, community-driven, self-hosted, Claude Code–specific, and may have bugs compared with production vendor solutions.
Bifrost: AI Gateway Makes Claude Code Enterprise-Ready
Bifrost is an open-source AI gateway (written in Go) designed to help enterprises deploy Anthropic's Claude Code at scale by providing centralized governance, cost controls, multi‑provider routing, and observability. By redirecting Claude Code traffic (via ANTHROPIC_BASE_URL) through Bifrost, organizations gain itemized cost tracking, per-user/group/global spending caps via virtual keys, smart provider selection across a 20+ provider network, and unified MCP (Model Context Protocol) tool management. Bifrost advertises minimal performance impact (about 11 microseconds added latency at 5,000 RPS), CLI tooling for endpoint and key management, and integrations for identity (Okta, Microsoft Entra), secrets stores (HashiCorp Vault, AWS/Google/Azure key vaults), and observability exports (Prometheus, OTLP, Datadog). The project is Apache 2.0 open source with optional enterprise add-ons for compliance and advanced operations.
Anthropic Launches Claude Managed Agents
Anthropic launched Claude Managed Agents on April 8, 2026 — a managed runtime and composable API set for building and deploying production AI agents on Anthropic’s cloud without requiring teams to build their own runtime infrastructure. The product targets infrastructure needs such as secure sandboxing, session persistence, credential isolation, error recovery and observability. At launch five enterprise customers were already in production: Notion, Rakuten, Asana, Sentry and Atlassian. Anthropic’s pricing adds standard Claude API token rates plus $0.08 per session-hour of active runtime; the company positions the service as eliminating the need for servers, containers, or DevOps for agent runtimes. Customer outcomes cited at launch include Rakuten cutting critical errors by 97% and accelerated release cadence; Sentry and Asana reported large reductions in time-to-resolution and development velocity improvements.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.