Issue Station
Sign In
Tools hereToolbox

claude-code - 💡(How to fix) Fix [DOCS] Vertex AI docs do not mention X.509 certificate-based Workload Identity Federation authentication [1 comments, 1 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
anthropics/claude-code#54169•Fetched 2026-04-29 06:34:26
View on GitHub
Comments
1
Participants
1
Timeline
7
Reactions
0
Author
coygeekcoygeek
Participants
coygeekcoygeek
Timeline (top)
labeled ×5closed ×1commented ×1
RAW_BUFFERClick to expand / collapse

Documentation Type

Missing documentation (feature not documented)

Documentation Location

https://code.claude.com/docs/en/google-vertex-ai

Section/Topic

"Sign in with Vertex AI" and "3. Configure GCP credentials"

Current Documentation

The docs currently say:

Choose how you authenticate to Google Cloud: Application Default Credentials from gcloud, a service account key file, or credentials already in your environment.

Later, the manual setup section says:

Claude Code uses standard Google Cloud authentication.

For more information, see Google Cloud authentication documentation.

And the note under that section says:

When authenticating, Claude Code will automatically use the project ID from the ANTHROPIC_VERTEX_PROJECT_ID environment variable. To override this, set one of these environment variables: GCLOUD_PROJECT, GOOGLE_CLOUD_PROJECT, or GOOGLE_APPLICATION_CREDENTIALS.

What's Wrong or Missing?

Changelog v2.1.121 added this behavior:

Vertex AI: support X.509 certificate-based Workload Identity Federation (mTLS ADC)

The current Vertex AI docs describe gcloud-backed Application Default Credentials, service account key files, and generic "credentials already in your environment," but they do not explicitly document that Claude Code now supports Google Cloud's X.509 certificate-based Workload Identity Federation / mTLS ADC flow.

That leaves enterprise users without clear guidance on whether certificate-based federation is a supported authentication path for Vertex AI, how it relates to ADC, and whether they can use it instead of downloadable service account keys.

Suggested Improvement

Update the Vertex AI authentication docs to explicitly list X.509 certificate-based Workload Identity Federation (mTLS ADC) as a supported Google Cloud authentication option.

Suggested additions:

  • In the wizard section, expand the authentication options list to mention certificate-based Workload Identity Federation / mTLS ADC alongside gcloud ADC and service account key files.
  • In "Configure GCP credentials," add a short note that Claude Code supports ADC established through X.509 certificate-based federation, so organizations can use certificate-backed workload identity instead of distributing service account keys.
  • Link to the relevant Google Cloud authentication documentation for setting up certificate-based federation, since Claude Code relies on standard Google Cloud auth.

Impact

Medium - Makes feature difficult to understand

Additional Context

Affected Pages:

PageContext
https://code.claude.com/docs/en/google-vertex-aiVertex AI sign-in flow, supported authentication methods, and manual credential setup

Total scope: 1 page affected

Source: Changelog v2.1.121

Exact changelog entry: Vertex AI: support X.509 certificate-based Workload Identity Federation (mTLS ADC)

extent analysis

TL;DR

Update the Vertex AI authentication documentation to include X.509 certificate-based Workload Identity Federation (mTLS ADC) as a supported authentication option.

Guidance

  • Review the current documentation for "Sign in with Vertex AI" and "3. Configure GCP credentials" to identify areas where X.509 certificate-based Workload Identity Federation (mTLS ADC) support can be explicitly mentioned.
  • Add a note to the "Configure GCP credentials" section explaining that Claude Code supports ADC established through X.509 certificate-based federation, allowing organizations to use certificate-backed workload identity instead of service account keys.
  • Link to relevant Google Cloud authentication documentation for setting up certificate-based federation to provide users with clear guidance.
  • Consider updating the authentication options list in the wizard section to include certificate-based Workload Identity Federation / mTLS ADC alongside other supported methods.

Example

No code snippet is necessary for this documentation update.

Notes

The suggested improvements aim to clarify the supported authentication methods for Vertex AI, specifically highlighting the addition of X.509 certificate-based Workload Identity Federation (mTLS ADC) support as mentioned in Changelog v2.1.121.

Recommendation

Apply workaround: Update the documentation to reflect the supported authentication options, including X.509 certificate-based Workload Identity Federation (mTLS ADC), to provide clear guidance for enterprise users.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…
#batch processing#GPU compatibility#latency issue#model loading#environment variable

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING