Identity Lifecycle Lab
Okta is the source of truth for identities. A lifecycle API creates, changes and deactivates people in Okta; Okta provisions the Glasscliff Expenses app over SCIM; every step is checked against what actually landed.
Glasscliff Expenses LiveSign in with Okta. Access follows your SCIM-provisioned account, and ends when you're offboarded. Signing in needs an account in the lab's Okta org, so visitors should start with the dashboard.
Operations dashboard LiveWatch hires, role changes and leavers move through Okta into Expenses, step by step. People are shown as pseudonyms.