Skip to content

WIP: Workload Identity Federation as an experimental extension - #40

Draft
pcarleton wants to merge 5 commits into
mainfrom
paulc/sep3392-wif-experimental
Draft

pcarleton wants to merge 5 commits into
mainfrom
paulc/sep3392-wif-experimental

Conversation

@pcarleton

@pcarleton pcarleton commented Oct 23, 2026 •

Copy link
Copy Markdown
Member

This brings in Pieter Kasselman's initial Workload Identity Federation draft as it stands, under specification/experimental/, with his commits kept.

TODO

  • Revise the text in light of the Workload Authorization Grant draft before merging as experimental. ( a very minimal version is here, though we may want this extension to explicitly support existing cloud provider WIF's)

Generated by Claude Code

PieterKas and others added 5 commits December 5, 2025 17:31
Clarified the prerequisites for the authorization server and improved the description of the message flow. Updated terminology for issuer trust and added details on token validation.
Move Pieter Kasselman's Workload Identity Federation text from
specification/draft/ to
specification/experimental/workload-identity-federation.mdx and list it in
README.md. The only changes to the text are the ones Prettier makes, so the
format check passes.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants