🖇 OIDC Additional Claims

env0 enables easy OIDC integration by passing an environment variable named ENV0_OIDC_TOKEN to your deployments - its value contains a short lived OIDC token (JWT) for authentication via a third party application.

✨ Improved Authorization ✨

Your authorization server could leverage our newly added claims for more secure and fine grained authorization, for example, here are a few possible verifications:

• Only a specific team can deploy to a specific environment
• A specific template can only be deployed to your dev / staging projects and not to the production project
• Enforce a workspace name pattern in your organization

We added the following claims to the OIDC token:

• organizationId
• projectId
• templateId
• templateName
• environmentId
• environmentName
• workspaceName
• deploymentLogId
• deployerEmail

Learn more about OIDC integration.