# Claude API WIF Credential Provider now available

Aembit now offers a Claude Workload Identity Federation (WIF) Credential Provider. Your workloads can call the Claude API with short-lived tokens that Aembit obtains on their behalf instead of long-lived API keys.

Aembit acts as a trusted OIDC issuer. You register Aembit as a federation issuer in Claude Console. Then, whenever an Access Policy grants a workload access, Aembit exchanges its issued assertion for a short-lived Claude access token.

**What’s new:**

* **Claude WIF Credential Provider type**: Configure the federation rule, organization, service account, and optional workspace from your Claude Console, plus the requested scope and token lifetime.
* **Built-in connection verification**: Use **Verify** to confirm the trust between Aembit and your Claude federation rule before you put the Credential Provider into an Access Policy.
* **Terraform support**: Manage the Claude WIF Credential Provider through the Aembit Terraform Provider.

For setup instructions, see [Configure a Claude WIF Credential Provider](/user-guide/access-policies/credential-providers/claude-workload-identity-federation).