WIF Issuers
Trusted OIDC identity providers for workload identity federation (RFC 8693).
Workload Identity Federation allows CI/CD pipelines, Kubernetes pods, and cloud functions to authenticate to AuthHub by exchanging their platform OIDC token — eliminating static API keys.
| Name | Issuer URL | Status | Workloads | Token TTL | Created |
|---|---|---|---|---|---|
GitHub Actions (nhs-digital) Auto-provision enabled | https://token.actions.githubusercontent.com | Enabled | 12 | 900s | 15/06/2026 |
EKS Cluster (eu-west-2) | https://oidc.eks.eu-west-2.amazonaws.com/id/A… | Enabled | 8 | 300s | 20/06/2026 |
GCP Cloud Run (staging) | https://accounts.google.com | Disabled | 0 | 600s | 01/07/2026 |