It would have been helpful to know that this all only applies to enterprise: https://www.pulumi.com/docs/pulumi-cloud/access-management/oidc/client/