root-at-skic
0745de822a
Six example models next to the three C4 ones: arc42 (Cinema Tickets, IoT Telemetry, Team Wiki) by section, ArchiMate (Insurance Claims, HR Onboarding, Logistics Tracking) by layer, each validated with 0 errors and 0 warnings. resolveRefs and the editor schemas now take ref: in workflow and dataflow nodes, sequence participants and lifecycle states, as the skill already did. Example tests check each framework's folders.
20 lines
701 B
Plaintext
20 lines
701 B
Plaintext
schema_version: 1
|
|
decision:
|
|
id: sso-only-via-company-idp
|
|
title: Sign-in only through the company identity provider
|
|
status: accepted
|
|
date: 2026-10-12
|
|
elements: [idp, api, web]
|
|
diagrams: [0300-context/technical-context.archify, 0600-runtime/sign-in.archify]
|
|
context: >
|
|
Leavers kept access to the old wiki because it had its
|
|
own passwords. Nobody owned the user list.
|
|
decision: >
|
|
The wiki has no local accounts. Users sign in with OIDC
|
|
at the company identity provider; team groups map to
|
|
wiki spaces.
|
|
consequences: >
|
|
Offboarding removes wiki access at once. The wiki cannot
|
|
be used when the identity provider is down. The admin
|
|
needs a break-glass account kept in the vault.
|