BTAA Provisioning Document Outline

1. Identity matching
2. Username assignment
3. Identifiers for services and target directories
4. Username changes
5. Social IDs

1. State and affiliation changes
2. Deactivation or deletion

1. Password rules and policies
2. Initial password setting
3. Assignment of additional authentication factors
4. Deprovisioning of credentials

1. Linking identities between directories
2. Communicating updates to target directories

1. Provisioning models: when to provision
2. Reconciliation
3. State changes and fine-grained authorization
4. Deprovisioning and repatriation

1. Types of groups
2. Guidance for architecting

Auditing

1. Reporting

2. Attestation

3. Workflows to deprovisioning