generated: '2026-07-11'
method: derived
source: openapi/octopus-deploy-openapi.yml
docs: https://octopus.com/docs/octopus-rest-api/openid-connect
note: >-
  Octopus Deploy does not use OAuth scopes; the OIDC client_credentials
  exchange only validates a service account identity, and API access is
  authorized by the service account's team and role permissions (or an
  API key) per https://octopus.com/docs/octopus-rest-api/openid-connect.
schemes:
- name: OidcAuth
  source: openapi/octopus-deploy-openapi.yml
  flows:
  - flow: clientCredentials
    tokenUrl: https://your-octopus-instance/api/oidc/token
  description: |-
    Authenticate by exchanging an OpenID Connect identity token from
    a trusted external system (for example GitHub Actions) for a
    short-lived Octopus access token.
scopes: []