Documentation

Get started with oidc.pub in minutes. Register a service, update your issuer URL, upload your OIDC configuration, and your discovery endpoint is live.

Quick Start

Set up your first OIDC service in four steps.

Authentication

API tokens and OIDC-based authentication.

API Reference

Endpoints for managing services and configurations.

Setup Guides

Make private OIDC issuers publicly verifiable through oidc.pub.

HashiCorp Vault

Publish Vault's OIDC identity tokens for external verification.

GitLab CI

Make self-hosted GitLab CI job tokens verifiable by cloud providers.

Kubernetes

Expose cluster service account issuer discovery publicly.

Terraform Enterprise

Publish workload identity tokens for cloud credential federation.

Integration Guides

Use identity that has already been published through oidc.pub, or understand product-specific constraints.

AWS

Set up an IAM OIDC identity provider with your oidc.pub endpoint.

HashiCorp Vault

Configure Vault's JWT/OIDC auth method to trust oidc.pub-hosted tokens.