Start here: running identity every day

Meet Zara. She runs identity for a company. Her work is not only logins. She makes sure Priya's account exists on day 1 and is gone on her last day. This track is her playbook.

Day 2, not day 1

Day 1 is the launch: sign-in works. Day 2 is every day after. Now you keep it safe, you can prove it, and you respect privacy. Day 2 never ends. You meet real directories (the company's list of people), real logs and auditors (outside checkers) who ask hard questions.

The journey

Each lesson is one part of Zara's week. Each one fixes a real problem that costs real money when nobody owns it. You will meet SCIM, a SIEM and a break-glass account for 2 a.m. emergencies.

1. SCIM provisioning — stops a leaver's account from working a month after they left.
2. Telemetry & SIEM — makes sure someone reads the logs before Monday.
3. Right to be forgotten — makes "delete me" reach every copy, even the AI's.
4. Custom push authenticator — makes the 3 a.m. "Approve?" tap safe.
5. Access reviews — takes back the access that piles up over the years.
6. Break-glass access — a fenced emergency account for when sign-in itself is down.
7. Reconciliation & drift — finds the ghost account that nobody remembered.
8. Cheat sheet & pop quiz — the playbook in short, then five scenarios.

How to use it

Do one lesson at a time. Progress saves in your browser. You do not need an account. Most lessons have a hands-on lab. In each one you sit at Zara's desk. Requests arrive, you make the call, and a wrong call has a cost. Nothing is real, so you can fail safely. This track builds on the Joiner–Mover–Leaver lifecycle from Foundations.

Ready? Start with SCIM provisioning.