OpenID Connect - CI/CD Glossary Definition
OpenID Connect (OIDC) is an identity layer built on top of OAuth 2.0 that issues a signed ID token proving who the user or workload is, in addition to OAuth access tokens.
The ID token
OIDC adds an ID token: a JWT containing claims such as sub (subject), iss (issuer), and aud (audience) that a relying party can verify.
In CI/CD
GitHub Actions issues an OIDC token for each workflow run, which a cloud provider trusts to grant short-lived credentials so no static keys are stored. Managed runners such as Latchkey rely on the same mechanism to authenticate to cloud APIs.
Related guides
OIDC - CI/CD Glossary DefinitionOIDC: **OIDC** (OpenID Connect) lets a workflow exchange its identity for short-lived cloud credentials, remo…
ID Token - CI/CD Glossary DefinitionID Token: An ID token is an OpenID Connect JWT that asserts the identity of an authenticated subject through…
Workload Identity - CI/CD Glossary DefinitionWorkload Identity: Workload identity lets a running workload authenticate to a cloud API using its own verifi…