# RFC: Making automated Mender Deployment/ Releases more secure using OIDC

**URL:** <https://hub.mender.io/t/rfc-making-automated-mender-deployment-releases-more-secure-using-oidc/8055>\
**Category:** General Discussions\
**Created:** [October 20, 2025, 1:47pm UTC](https://hub.mender.io/t/rfc-making-automated-mender-deployment-releases-more-secure-using-oidc/8055 "2025-10-20T13:47:24Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![alabs-tomscholz](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/alabs-tomscholz/32/2595_2.png) [@alabs-tomscholz](https://hub.mender.io/u/alabs-tomscholz)\
**Post date:** [October 20, 2025, 1:47pm UTC](https://hub.mender.io/t/rfc-making-automated-mender-deployment-releases-more-secure-using-oidc/8055/1 "2025-10-20T13:47:24Z")

</div>

Hi everyone,

I submitted an Issue on GitHub to discuss adding an OIDC endpoint to mender server, so that GitHub Action builds and GitLab CI Jobs could interface with the mender server api without static tokens! I would highly appreciate any feedback 🙂

The issue: [RFC: Add OIDC authentication flow for Deployments (enable GitHub Actions / GitLab CI to deploy without static tokens) · Issue #1043 · mendersoftware/mender-server · GitHub](https://github.com/mendersoftware/mender-server/issues/1043)

Kind regards,  
Tom

---

<div class="post-metadata">

**Author:** ![TheYoctoJester](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/theyoctojester/32/1444_2.png) [@TheYoctoJester](https://hub.mender.io/u/TheYoctoJester)\
**Post date:** [October 21, 2025, 8:42am UTC](https://hub.mender.io/t/rfc-making-automated-mender-deployment-releases-more-secure-using-oidc/8055/2 "2025-10-21T08:42:03Z")

</div>

Hi @alabs-tomscholz,

Thanks for reaching out and submitting! I have pointed the relevant people to the PR, so hopefully we can get the discussion and everything that follow going.

Greetz,  
Josef