The Identity TableReviewed

What is SPIFFE?

By The Identity Table desk. Reviewed .

In short:SPIFFE, the Secure Production Identity Framework for Everyone, is an open standard for workload identity. It gives each running service a cryptographic identity that is attested and rotated automatically. Agents deployed as services can use SPIFFE to authenticate without stored secrets of any kind.

How does it work?

A workload API attests the process and hands it an SVID. Services verify SVIDs against a trust bundle.

What does it look like in practice?

Aembit and Descope name SPIFFE in public material.

Related terms

All 40 glossary terms