Skip to content

Workload Identifier — draft-ietf-wimse-identifier#

IETF 123 (Madrid) digest Program Core pick Madrid · 19–25 July 2025

Slides Session recording Materials

  • Tier: Core
  • Why: A canonical URI for naming a workload within a trust domain, embeddable in X.509 certs and security tokens. This is the SPIFFE-ID-shaped piece, and getting it standardized is what makes cross-system authorization and federation consistent.
  • What: Defines a Workload Identifier as a URI that uniquely identifies a workload inside a specific trust domain, intended for embedding in credentials to drive authn, authz, and policy. (from abstract only)
  • How: Standardizes the identifier format so the same identity semantics hold across certificates, tokens, and policy engines from different vendors.
  • Where applicable: General; foundational for any federation or policy enforcement that spans trust domains.