Skip to main content
Shows the currently authenticated user information and exits. Use this command to verify your authentication status.

​
Options

​
TEXT
Name of the remote in .trussrc to check.
​
Display your OIDC configuration for workload identity, including org ID, team IDs, issuer, audience, and the subject claim format used for cloud provider trust policies.
​
Display the AWS AssumeRole trust-policy inputs for your organization: the Baseten role ARN to allow and the external ID to require via sts:ExternalId.
​
humanfriendly | W | WARNING | I | INFO | D | DEBUG
default:"humanfriendly"
Logging verbosity. humanfriendly (default) is pretty-printed; INFO, DEBUG, WARNING produce structured logs.
​
Disable interactive prompts. Use in CI/automated contexts where stdin isn’t a TTY.
Examples: Check the current authenticated user:
You should see:
View your OIDC configuration for setting up cloud provider trust policies:
This displays your OIDC configuration for workload identity: Use the org and team IDs from this output when configuring trust policies in AWS or GCP. After Baseten enables AWS AssumeRole for your organization, view your trust-policy inputs:
You should see:
Allow the Baseten role ARN in your IAM role’s trust policy and require the external ID through its sts:ExternalId condition when granting Baseten access to your ECR images or S3 weights. For setup instructions, see AWS AssumeRole authentication.