Docs / Identity / Change Control
Identity Change Control
Identity changes are queued, approved, and recorded with receipts.
What this covers
Change queue
Stage identity changes before activation.
Approval timeline
Track multi‑party approvals with evidence.
Receipts
Every approval yields a signed receipt.
How to use
1. Submit change
Queue provider, role, or session policy updates.
2. Review diff
Inspect deterministic changes before approval.
3. Approve
Collect required approvals.
4. Apply + record
Apply change and write receipts.
5. Export packet
Export identity change packet.
Console pages
Key API endpoints
POST /identity/changes — Submit a changePOST /identity/changes/approve — Approve a changeGET /identity/changes/export — Export change receiptsEvidence outputs
Change queue snapshots
Approval timeline exports
Identity change packets