Every organization around the world relies on complex tasks and services for automation and scalability. Many of these services need to run in the context of a workload identity without user supervision, which presents an extra security challenge for enterprises. A workload identity is an identity that allows an application or service to access secure resources, without the presence of a user. These workload identities differ from traditional user accounts as they:
- Cannot perform multi-factor authentication
- Often have no formal lifecycle process
- Need to store their credentials or secrets somewhere