From 8ec7da1838d86b6afa709bc6ca3ea79d9e0271d1 Mon Sep 17 00:00:00 2001
From: meeech <4623+meeech@users.noreply.github.com>
Date: Sat, 1 Nov 2025 12:47:09 -0400
Subject: [PATCH] Document pipeline-id, org-id OIDC claims

---
 .../pages/openid-connect-tokens.adoc                        | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/docs/guides/modules/permissions-authentication/pages/openid-connect-tokens.adoc b/docs/guides/modules/permissions-authentication/pages/openid-connect-tokens.adoc
index 41e976a79b..01a85e6cf9 100644
--- a/docs/guides/modules/permissions-authentication/pages/openid-connect-tokens.adoc
+++ b/docs/guides/modules/permissions-authentication/pages/openid-connect-tokens.adoc
@@ -78,6 +78,12 @@ The OpenID Connect ID tokens also contain some https://openid.net/specs/openid-c
 | `oidc.circleci.com/project-id`
 | The ID of the project in which the job is running. Its value is a string containing a UUID identifying the CircleCI project.
 
+| `oidc.circleci.com/pipeline-id`
+| The unique identifier for the pipeline that triggered this job. Its value is a string containing a UUID identifying the CircleCI pipeline.
+
+| `oidc.circleci.com/org-id`
+| The unique identifier for the organization. Its value is a string containing a UUID identifying the CircleCI organization.
+
 | `oidc.circleci.com/vcs-origin`
 | The URL of the repository that triggered the pipeline. Its value is a string similar to `github.com/organization-123/repo-1`. This is not present for pipelines triggered by custom webhooks.