Authentication
enum uses OIDC-based authentication. All credentials are stored locally in ~/.config/enumctl/.
enumctl auth loginOpens your default browser to the enum login page. After completing the flow, your session is stored locally.
Logout
Section titled “Logout”enumctl auth logoutRemoves stored credentials from your machine.
Get token
Section titled “Get token”enumctl auth get-tokenOutputs the current access token in Kubernetes ExecCredential format. This is used internally by kubectl — you typically don’t need to run this directly.
Troubleshooting
Section titled “Troubleshooting”Session expired or invalid:
enumctl auth logoutenumctl auth loginDebug logging:
enumctl auth login --verboseCheck config directory:
ls -la ~/.config/enumctl/