diff --git a/config/identity_oidc_key/encapi.yaml b/config/identity_oidc_key/encapi.yaml
new file mode 100644
index 0000000..f9d88b5
--- /dev/null
+++ b/config/identity_oidc_key/encapi.yaml
@@ -0,0 +1,2 @@
+---
+algorithm: RS256
diff --git a/config/identity_oidc_role/encapi/encapi-testing.yaml b/config/identity_oidc_role/encapi/encapi-testing.yaml
new file mode 100644
index 0000000..39c849f
--- /dev/null
+++ b/config/identity_oidc_role/encapi/encapi-testing.yaml
@@ -0,0 +1,3 @@
+---
+client_id: encapi-testing
+ttl: 900
diff --git a/config/identity_oidc_role/encapi/terraform-enc.yaml b/config/identity_oidc_role/encapi/terraform-enc.yaml
new file mode 100644
index 0000000..732b380
--- /dev/null
+++ b/config/identity_oidc_role/encapi/terraform-enc.yaml
@@ -0,0 +1,3 @@
+---
+client_id: encapi
+ttl: 900
diff --git a/policies/identity/oidc/token/encapi-testing.yaml b/policies/identity/oidc/token/encapi-testing.yaml
new file mode 100644
index 0000000..7ce444f
--- /dev/null
+++ b/policies/identity/oidc/token/encapi-testing.yaml
@@ -0,0 +1,11 @@
+---
+rules:
+  - path: "identity/oidc/token/encapi-testing"
+    capabilities:
+      - read
+
+auth:
+  ldap:
+    - vault_admin
+  oidc:
+    - akP-vault-admin
diff --git a/policies/identity/oidc/token/terraform-enc.yaml b/policies/identity/oidc/token/terraform-enc.yaml
new file mode 100644
index 0000000..5d024c1
--- /dev/null
+++ b/policies/identity/oidc/token/terraform-enc.yaml
@@ -0,0 +1,11 @@
+---
+rules:
+  - path: "identity/oidc/token/terraform-enc"
+    capabilities:
+      - read
+
+auth:
+  approle:
+    - terraform_enc
+  k8s/au/syd1:
+    - woodpecker_terraform_enc