Service principals and CI/CD federation skip the access reviews that catch humans. The OIDC trust policy string is what actually decides who reaches production.
Your most privileged identity has no login
calendar_today
September 2, 2026
domain
workos