Demystifying Workload Identity Federation: From Custom OIDC to AWS and Azure

Demystifying Workload Identity Federation: From Custom OIDC to AWS and Azure

Demystifying Workload Identity Federation: From Custom OIDC to AWS and Azure In this blog post, we will dive deep into OIDC and WIF. Let’s say there are three levels of difficulty in workload identity. The first level, which is easier, is to use workload identity in the environment itself. For example, AWS has instance roles, and you can use them as a workload identity. Azure has managed and user identities which can be used as a workload identity. ...

August 4, 2026 · 16 min · giomke
OIDC in the Cloud

Authentication in the Cloud

Introduction I’ve noticed that many people in our field, even in 2025, still authenticate themselves and machines using old-fashioned way, such as passwords or long-term credentials. This short blog post takes elements from various resources to emphasize the importance of short-lived credentials for both humans and machines. The main focus of this blog is to promote the use of FIDO for user authentication and OIDC for machine authentication to avoid relying on long-term credentials. ...

April 1, 2025 · 10 min · giomke