Skip to content

Authentication

enum uses OIDC-based authentication. All credentials are stored locally in ~/.config/enumctl/.

Terminal window
enumctl auth login

Opens your default browser to the enum login page. After completing the flow, your session is stored locally.

Terminal window
enumctl auth logout

Removes stored credentials from your machine.

Terminal window
enumctl auth get-token

Outputs the current access token in Kubernetes ExecCredential format. This is used internally by kubectl — you typically don’t need to run this directly.

Session expired or invalid:

Terminal window
enumctl auth logout
enumctl auth login

Debug logging:

Terminal window
enumctl auth login --verbose

Check config directory:

Terminal window
ls -la ~/.config/enumctl/