# tanomis login

Reference for tanomis login: log in to a hosted control plane via OIDC.

Generated from the <code>tanomis</code> command tree on 2026-10-01. Flags and defaults match the binary; run <code>tanomis login --help</code> for the version you have installed.

## Usage

```text title="Usage"
tanomis login [flags]
```

## Description

Authenticate an operator against a hosted control plane and cache a
refreshable token. Defaults to the device authorization grant; use
`--loopback` for the browser authorization-code flow (requires an IdP
app that allows it). With `--console`, bootstrap the context from the
control plane's GET /v1/cli-config first.

## Flags

| Flag | Type | Description |
|---|---|---|
| `--ca-bundle` | string | Extra CA bundle (PEM) to trust for the IdP. |
| `--console` | string | Control-plane console/runtime base URL to bootstrap from. |
| `--device` | bool | Use the device authorization grant (default). |
| `--loopback` | bool | Use the browser authorization-code + PKCE loopback flow (requires an IdP app that allows it). |
| `--name` | string | Context name to create/update (default: console host). |
| `--tenant` | string | Preferred tenant/org (reserved; passthrough). |

<details>
<summary>Global flags</summary>

| Flag | Type | Description |
|---|---|---|
| `--config` | string | Config file path. |
| `--context` | string | Config context to use. |
| `-o`, `--output` | string | Output format: table\|json. |
| `--verbose` | bool | Verbose output. |

</details>

## Examples