ANTHROPIC_PROFILE

Claude Code reads the Workload Identity Federation variables and the ANTHROPIC_PROFILE and ANTHROPIC_CONFIG_DIR selectors only at startup, so a server-delivered value for them doesn't switch the session's credential source even after the fetch succeeds. To deliver those selectors on Claude Code v2.1.223 or later, use endpoint-managed settings such as MDM or managed-settings.json. For CLAUDE_CONFIG_DIR and the operating-system directory variables, the withholding itself is the protection: the cached value stays out of the environment until the server confirms the payload.