Time: 55 minutes Outcome: Learners will map proofing, provisioning, authentication, authorization, review, change, recovery, and deprovisioning for a fictional account.
Materials
- Identity lifecycle cards
- Fictional school-club account scenario
- Mapping worksheet
Safety and Privacy
Use a fictional account and invented roles. Do not review real school directory information or account settings.
Activity
Teams arrange lifecycle cards for a new student club member. The scenario then changes: the learner becomes treasurer, loses a device, and later leaves the club. Teams update access and identify risks at each transition.
Evidence
An annotated lifecycle map showing who approves access, how authentication is protected, how access is reviewed, and how sessions and credentials are removed.
Debrief
- Why can an unused account remain dangerous?
- How can recovery become an alternate attack path?
- What evidence should exist after access changes?