IdP Users
Authentication accounts in the local identity provider. These are the login credentials — email + password — that people use to sign in.
People
Person identities in the membership directory. Governance, JML lifecycle, and access assignments are all anchored to a person — not a login account.
Claim-Role Mapping
Rules that map incoming IdP claims (e.g. an EntraID group claim) to EmpowerNow collections, so federated users get access automatically at login.
Accounts
All account records across all providers. The Orphan view highlights accounts with no linked person — these need remediation before they appear in governance workflows.
Collections
Subject cohorts — groups of people defined by static membership or dynamic rules. Collections are the unit of access assignment in EmpowerNow.
Access Assignments
The matrix that maps collections to application roles. The Quick Assign flow lets you grant a collection access to a specific role in seconds.
| Path | Screen |
|---|---|
| /identity-core | Identity Dashboard — overview widgets and quick-access links |
| /identity-core/idp-users | IdP User Management — authentication accounts |
| /identity-core/people | People List — all person identities with lifecycle and risk indicators |
| /identity-core/people/:personId | Person Detail — full profile, accounts, memberships, risk |
| /identity-core/accounts | All Accounts — every account across all providers |
| /identity-core/accounts/orphans | Orphan Accounts — accounts with no linked person |
| /identity-core/claim-role-mapping | Claim-Role Mapping Editor — manage CRM rules |
| /collections-admin/collections | Collections — create and manage subject cohorts |
| /identity-core/access-assignments | Access Assignments Workbench — full matrix view |
| /identity-core/access-simulator | Access Simulator — what-if testing for access decisions |
| /identity-core/my-security | My Security — self-service: change password, view own access |
| /identity-core/graph | Graph Explorer — visual identity relationship graph |
| /identity-core/organization | Organization Hierarchy — org-tree browser |
IdP User Management
Create authentication accounts, set passwords, manage roles, enable/disable users, and link accounts to person identities.
People Management
Create person identities, view lifecycle status, search and filter, bulk suspend, and explore identity relationships.
Claim-Role Mapping (CRM)
Map IdP claims to EmpowerNow collections so federated users receive access automatically at login.
Accounts & Orphan Detection
Review all accounts, identify orphaned accounts with no linked person identity, and remediate or disable them.
Collections
Create subject-cohort collections, define static or dynamic membership rules, and publish access packages for self-service request.
Access Assignments
Use the Access Assignments Workbench to stage, preview, and apply collection-to-role grants across the full matrix.