Skip to main content
truss whoami [OPTIONS]
Shows the currently authenticated user information and exits. Use this command to verify your authentication status.

Options

--remote
TEXT
Name of the remote in .trussrc to check.
--show-oidc
FLAG
Display your OIDC configuration for workload identity, including org ID, team IDs, issuer, audience, and the subject claim format used for cloud provider trust policies.
Examples: Check the current authenticated user:
truss whoami
You should see:
my-workspace\user@example.com
View your OIDC configuration for setting up cloud provider trust policies:
truss whoami --show-oidc
This displays your OIDC configuration for workload identity:
FieldDescriptionExample
Org IDYour organization identifierMvg9jrRd
TeamsTeam IDs within your organizationAviIZ0y3 (my-team)
IssuerThe Baseten OIDC issuer URLhttps://oidc.baseten.co
AudienceThe expected audience claimoidc.baseten.co
Workload Type OptionsAvailable workload types for subject claimsmodel_container, model_build
Subject Claim FormatPattern used in cloud provider trust policies to scope accessv=1:org=<org_id>:team=<team_id>:model=<model_id>:deployment=<deployment_id>:environment=<environment>:type=<workload_type>
Use the org and team IDs from this output when configuring trust policies in AWS or GCP.