Skip to content
This repository has been archived by the owner on Oct 30, 2023. It is now read-only.

Commit

Permalink
Added Detailee Use Case
Browse files Browse the repository at this point in the history
Added use case from issue #591
  • Loading branch information
claytonjbarnette authored Nov 23, 2022
1 parent 3f8b549 commit 73f6f1f
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions _playbooks/playbook-ilm.md
Original file line number Diff line number Diff line change
Expand Up @@ -285,6 +285,8 @@ Make attributes available for authorization decisions. Federation is not only ac

See the [Cloud Identity Playbook Federation section]({{site.baseurl}}/playbooks/cloud/#federation) for more information on federation and using trust frameworks for government, mission partner, or public identity federation.

**Detailee Use Case** - An Agency A employee is detailed to Agency B. How can Agency B use their ILM system for this existing Agency A employee, but short-term Agency B employee. Can Agency A share HR data to do birth-right provisioning in Agency B? I think the corpus of this use case is how Agency B can provision Agency A employee without issuing them an Agency A piv card and an Agency A email.

## Summary

The ILM playbook outlined an identity lifecycle process and four steps to create a master user record and lifecycle process within your agency. ILM is the evolution of an identity from creation to deactivation. There are specific steps within each lifecycle phase of the joiner-mover-leaver process. A master user record is the core of ILM and acts as an aggregation point of identity data for all agency users. A master user record integrated with access management tools provides a foundation for more mature ICAM processes.
Expand Down

0 comments on commit 73f6f1f

Please sign in to comment.