Workload Identity

Report an Issue

Is this page helpful?

How can we improve this page?

View as Markdown

The guides in this section explain how to use Workload Identity, which securely issues flexible short-lived identities to workloads in your infrastructure.

Getting started

• Introduction to Workload Identity: Describes Teleport Workload Identity, which securely issues flexible, short-lived cryptographic identities to workloads and non-human identities.
• Introduction to SPIFFE: Learn about Secure Production Identity Framework For Everyone (SPIFFE) and how it is implemented by Teleport Workload Identity
• Getting Started with Workload Identity: Getting started with Teleport Workload Identity for SPIFFE

Configuration Guides

AWS OIDC FederationAWS Roles AnywhereAzure Federated CredentialsGCP Workload Identity FederationManually issue SPIFFE SVIDs with Teleport CLI tool tsh

Configuration management

• Best Practices for Teleport Workload Identity: Answers common questions and describes best practices for using Teleport Workload Identity in production.
• JWT SVIDs: An overview of the JWT SVIDs issued by Teleport Workload Identity
• SPIFFE Federation: An overview of the Teleport Workload Identity SPIFFE Federation feature.
• Workload Attestation: An overview of the Teleport Workload Identity Workload Attestation feature.
• Workload Identity Resource: The full reference for the Workload Identity resource.