For attesting the agent For registering the workload For retrieving identity document For bootstrapping a service For issuing identity document For authenticating using identity document For delivering certificates For delivering keys For configuring node attestation For configuring workload attestation For establishing communication in untrusted networks For authenticating a channel between workloads
Identity Format has a better name: Identity Namespace or Service Identity According to the specification https://github.com/spiffe/spiffe/blob/main/standards/SPIFFE-ID.md SpiffeID is the Identity Namespace
Identity Document can be either a Certificate or a Token