Security

OpenID Connect

OpenID Connect is an identity protocol built on OAuth 2.0 that provides signed claims about an authenticated subject. CI systems can issue identity tokens whose claims a cloud provider validates before granting temporary access.

Also known as: OIDC

Why it matters

Signed workload identity enables temporary access without distributing a permanent cloud key.

Practical example

Restrict federation policies to the intended repository, branch, or deployment environment.

Related terms

Sources

Definition reviewed .

Start with $10 in free credits

Change the runner label in your workflow and keep the rest of your GitHub Actions setup. Runner time is billed per minute.

← Return to glossary