Managed identities for workloads
Runseal workers authenticate to Azure using managed identities. There is no shared application secret to store, rotate or leak.
Security
Privileged automation without implicit trust
Zero Trust is not a label added to Runseal. It is expressed in who can request an action, which identity may execute it, what that identity can access and what evidence remains afterwards.
Explicit user authentication
Users authenticate through Entra ID. Browser authentication uses Authorization Code Flow with PKCE, so the browser never holds a client secret.
Server-side authorization
Every request is re-validated server-side. The caller and principal are checked on each call rather than trusted because they reached the platform.
Default-deny access
Access is deny by default. A missing role or ownership assignment fails closed. No assignment means no access.
Role and ownership scoping
Authorization is scoped to the caller's role and to the resources they own. A resource owner sees only what is assigned to them.
Least privilege for every worker
Each worker receives only the permissions its defined actions require, and nothing more. There is no broad shared execution identity.
Visibility separated from mutation
The privilege to observe is distinct from the privilege to change. Read paths and write paths are governed independently.
Evidence on every action
Each request and result leaves an operational record that can support investigation, reconciliation and audit.
The safest application credential is the one that was never issued.
Runseal is built so that automating a privileged action does not hand you a new standing credential to defend.