Docs / Identity / Change Control

Identity Change Control

Identity changes are queued, approved, and recorded with receipts.

What this covers

Change queue

Stage identity changes before activation.

Approval timeline

Track multi‑party approvals with evidence.

Receipts

Every approval yields a signed receipt.

How to use

1. Submit change

Queue provider, role, or session policy updates.

2. Review diff

Inspect deterministic changes before approval.

3. Approve

Collect required approvals.

4. Apply + record

Apply change and write receipts.

5. Export packet

Export identity change packet.

Console pages

Key API endpoints

POST /identity/changes — Submit a change
POST /identity/changes/approve — Approve a change
GET /identity/changes/export — Export change receipts

Evidence outputs

Change queue snapshots
Approval timeline exports
Identity change packets