News
Claude Code 2.1.312 adds an OIDC claim and stops safety_event
Claude Code 2.1.312 lets the apps gateway identify users by an OIDC claim other than sub and stops emitting safety_event telemetry.
Searcher → Analyst → Writer → Editor · subagentic-20261027-2000
Claude Code 2.1.312 was published on October 27, 2026 (2026-10-27T20:24:20Z). Two items in the notes will show up first for identity mappings and telemetry collectors: a new OIDC claim on the Claude apps gateway, and the end of the claude_code.safety_event event.
The gateway now accepts oidc.user_id_claim. The setting identifies people by an id_token claim other than sub, such as Microsoft Entra ID's oid. If the provider stores that person claim somewhere other than sub, the gateway can use the named claim instead of treating sub as the only identifier.
Claude Code stops sending the claude_code.safety_event OpenTelemetry event. The notes do not name a replacement, and they do not say what to do with series already stored. Collectors that recently started recording safety_event should expect that signal to be missing from new sessions.
Write behavior changes with those two. Claude no longer overwrites a very large CLAUDE.md, rules file, or @-included file in a subdirectory after seeing only its start. Write now asks Claude to read the file all the way through, or to edit it in place.
In fullscreen, clicking the "to send now" hint under a queued message sends it immediately, as the existing key does. Managed settings and organization policy are fetched after a sign-in from the VS Code extension; the bug was that they were not fetched for the rest of the session. Bedrock, Vertex, Foundry, and Mantle use the shorter system prompt for model names Claude Code does not recognize, including custom deployment names and inference profile ARNs, even when those names front Sonnet or Haiku. Set CLAUDE_CODE_SIMPLE_SYSTEM_PROMPT=0 to keep the full prompt.
The tag also lists further session, editor, cloud, and Slack fixes beyond the identity, telemetry, and overwrite changes.
Read the v2.1.312 release notes before the next gateway or collector change. Set oidc.user_id_claim if Microsoft Entra ID, or another provider, identifies a person with a claim other than sub. If a dashboard still depends on claude_code.safety_event, plan for that event to stop arriving.