Credentials journeys
Table of Contents
Passwords and sign-in state are the part of identity a person worries about, and the part an administrator is called to fix. One journey belongs to the member, one to the administrator, and one is the record of what actually happened.
The sign-in record is an event log, not a versioned entity. Its screen is called Audit, carries no versions, no diff and no revert, and has Refresh only. That naming is not a preference: it is what the UX language requires.
1. Journeys
| Journey | Actor | Gist |
|---|---|---|
| Protect my account | member | Change my password and see where my account is signed in |
| Rescue access | tenant administrator | Reset a password, lock or unlock an account |
| Audit sign-ins | tenant administrator | Review active sessions, activity and failed attempts |