IdentityLifecycle
Provisioning and revoking access in sync with account state changes — joiner/mover/leaver, periodic access reviews.
Why we need this / what value this brings
Stale access (a suspended provider who can still log in) is a real security and trust risk in a marketplace.
When to use this
As soon as accounts can be suspended, banned, or providers/customers can change status.
How to use or implement this
Tie access checks to current account status looked up at request time, not to a cached flag set at login.
Research questions
- What's the equivalent for a marketplace: provider onboarding/offboarding, suspended accounts?
Empty folder — drop notes, links, and findings here as you research.