Terraform Cloud Organization ID

This page explains how to use the Terraform Cloud ID Token Organization ID identifier to uniquely identify Terraform workloads running on Terraform Cloud (TFC) using a Terraform Cloud ID Token.

Understanding the Terraform Cloud ID token organization ID

When Terraform Cloud executes runs, it can issue an OIDC-compliant identity token that includes an terraform_organization_id claim. This value uniquely identifies the Terraform Cloud organization under which the workload runs. Aembit uses this value to associate a Terraform run with a specific Client Workload.

For example, an organization ID might look like: org-GRNbCjYNpBB6NEH9

Applicable deployment type

Aembit supports this identifier only when you use the Aembit Terraform provider.

Create a Client Workload with a Terraform Cloud ID Token identifier

To configure a Client Workload using the Terraform Cloud ID Token identifier, follow these steps:

1. Log into your Aembit Tenant.

2. Click Client Workloads in the left nav pane.

3. Click New, revealing the Client Workload pop out menu.

4. Enter the Name and optional Description for the Client Workload.

5. Under Client Identification, select Terraform Cloud ID Token Organization ID.

   For Value, enter the Terraform Cloud Organization ID associated with the workload.

   For example: org-GRNbCjYNpBB6NEH9

6. Click Save.

   Aembit displays the new Client Workload on the Client Workloads page.

Client Workload identifier uniqueness

When you identify a Client Workload using a single identifier such as this one in a complex environment, this identifier may not always provide sufficient uniqueness.

To avoid Aembit unintentionally matching something beyond what it’s intended to match, Aembit recommends that you set additional identifiers to compliment this one, creating a Client Workload identity that’s unique across your environment.

See Using multiple Client Workload identifiers for guidance on combining this identifier with more specific identifiers such as those on the Client Workload Identifiers overview page, which includes vendor- and technology-specific identifiers.

Find Terraform cloud organization ID

1. Log into Terraform Cloud.
2. Choose your organization.
3. In the left navigation menu, click Settings.
4. Under General Settings, you’ll find the Organization ID at the top of the page.