SignetIDidentity for work Sign in

Integration

Signet ID is the company's OIDC provider. Discovery is at /.well-known/openid-configuration.

Sign-in flows
Authorization codeGET /oauth/authorize → /oauth/token
Client credentialsPOST /oauth/token
Workload federationurn:signet:workload
IntrospectionPOST /oauth/introspect
First-party clients

Trusted first-party clients skip the consent screen. Public clients (CLI) require no secret; confidential clients authenticate with one.

signet-cli      public, trusted
signet-connect  confidential, trusted
svc-reporting   confidential · reports.read/write
Directory (LDAP)

The org OpenLDAP (dc=signet,dc=corp) is the directory of record: people, groups and automation identities. Connect searches it over a read-only service bind; identity sync runs every night.

Workload federation

CI workloads exchange a service token for a scoped JWT (audience signet-cloud) and assume a cloud role with it.

POST /oauth/token
  grant_type=urn:signet:workload
  client_id=signet-ci&subject_token=…&project=…&ref=refs/heads/main