Machine Identities
Workload Identity Manager
Workload Identity Manager gives each cloud-native workload its own verifiable identity instead of a long-lived shared secret. It uses the open SPIFFE standard and was formerly known as Venafi Firefly.
What it is
Workload Identity Manager issues identities to workloads such as containers, services, and functions. Each identity is short-lived and tied to the workload, so there is no static credential to steal or leak. The identities follow the SPIFFE standard, which lets workloads authenticate to each other in a portable way.
Key capabilities
- Issues short-lived identities to cloud-native workloads.
- Follows the open SPIFFE standard for portable workload identity.
- Removes the need for long-lived shared secrets between services.
- Works in dynamic, fast-scaling environments like Kubernetes.
- Supports policy on which workloads receive which identities.
Who it’s for
Workload Identity Manager fits teams running cloud-native and containerized applications. It helps platform and security teams give services strong identity for service-to-service trust without managing static credentials.