[{"data":1,"prerenderedAt":250},["ShallowReactive",2],{"docs-navigation":3,"docs-page-\u002Farchitecture":75,"docs-surround-\u002Farchitecture":247},[4,45,51,57,63,69],{"title":5,"path":6,"stem":7,"children":8,"page":-1},"Architecture","\u002Farchitecture","architecture",[9,11,15,19,23,27,31,35],{"title":5,"path":6,"stem":10},"architecture\u002Findex",{"title":12,"path":13,"stem":14},"Identity","\u002Farchitecture\u002Fidentity","architecture\u002F1.identity",{"title":16,"path":17,"stem":18},"Organisations","\u002Farchitecture\u002Forganisations","architecture\u002F2.organisations",{"title":20,"path":21,"stem":22},"Roles","\u002Farchitecture\u002Froles","architecture\u002F3.roles",{"title":24,"path":25,"stem":26},"Domains and claims","\u002Farchitecture\u002Fdomains-and-claims","architecture\u002F4.domains-and-claims",{"title":28,"path":29,"stem":30},"Access","\u002Farchitecture\u002Faccess","architecture\u002F5.access",{"title":32,"path":33,"stem":34},"Invitations and requests","\u002Farchitecture\u002Finvitations-and-requests","architecture\u002F6.invitations-and-requests",{"title":36,"path":37,"stem":38,"children":39,"page":44},"Data model","\u002Farchitecture\u002Fdata-model","architecture\u002F7.data-model",[40],{"title":41,"path":42,"stem":43},"ZoneAudit","\u002Farchitecture\u002Fdata-model\u002Fzoneaudit","architecture\u002F7.data-model\u002F1.zoneaudit",false,{"title":46,"path":47,"stem":48,"children":49},"Glossary","\u002Fglossary","glossary\u002Findex",[50],{"title":46,"path":47,"stem":48},{"title":52,"path":53,"stem":54,"children":55},"Guides","\u002Fguides","guides\u002Findex",[56],{"title":52,"path":53,"stem":54},{"title":58,"path":59,"stem":60,"children":61},"Products","\u002Fproducts","products\u002Findex",[62],{"title":58,"path":59,"stem":60},{"title":64,"path":65,"stem":66,"children":67},"Trust","\u002Ftrust","trust\u002Findex",[68],{"title":64,"path":65,"stem":66},{"title":70,"path":71,"stem":72,"children":73},"Updates","\u002Fupdates","updates\u002Findex",[74],{"title":70,"path":71,"stem":72},{"id":76,"title":5,"body":77,"description":240,"extension":241,"meta":242,"navTitle":243,"navigation":244,"path":6,"roleNote":244,"seo":245,"stem":10,"__hash__":246},"docs\u002Farchitecture\u002Findex.md",{"type":78,"value":79,"toc":232},"minimark",[80,84,90,95,202,206,209,225,229],[81,82,83],"p",{},"CobraSphere products share one identity service. It knows each person, the organisations they belong to and the role they hold in each one. The products read the same records, so a person signs in once and is the same person everywhere.",[85,86,87],"identity-diagram",{},[81,88,89],{},"One person, several addresses, a role in each organisation, and the products they may open.",[91,92,94],"h2",{"id":93},"the-parts","The parts",[96,97,98,114],"table",{},[99,100,101],"thead",{},[102,103,104,108,111],"tr",{},[105,106,107],"th",{},"Part",[105,109,110],{},"What it is",[105,112,113],{},"Read more",[115,116,117,131,143,155,167,179,190],"tbody",{},[102,118,119,123,126],{},[120,121,122],"td",{},"Person",[120,124,125],{},"One CobraSphere ID per person, with one or more verified email addresses",[120,127,128],{},[129,130,12],"a",{"href":13},[102,132,133,136,139],{},[120,134,135],{},"Organisation",[120,137,138],{},"A business in CobraSphere, joined through an access grant",[120,140,141],{},[129,142,16],{"href":17},[102,144,145,148,151],{},[120,146,147],{},"Role",[120,149,150],{},"What a person may do in one organisation, from Guest viewer to Owner",[120,152,153],{},[129,154,20],{"href":21},[102,156,157,160,163],{},[120,158,159],{},"Domain claim",[120,161,162],{},"Proof with a DNS record that an organisation runs a domain",[120,164,165],{},[129,166,24],{"href":25},[102,168,169,172,175],{},[120,170,171],{},"Product access",[120,173,174],{},"Which CobraSphere products a person may open",[120,176,177],{},[129,178,28],{"href":29},[102,180,181,183,186],{},[120,182,32],{},[120,184,185],{},"How people are invited, ask for access, leave or close an account",[120,187,188],{},[129,189,32],{"href":33},[102,191,192,195,198],{},[120,193,194],{},"ZoneAudit data model",[120,196,197],{},"How ZoneAudit keeps scans, findings and access codes for a domain",[120,199,200],{},[129,201,41],{"href":42},[91,203,205],{"id":204},"two-kinds-of-access","Two kinds of access",[81,207,208],{},"A role and product access answer different questions.",[210,211,212,220],"ul",{},[213,214,215,219],"li",{},[216,217,218],"strong",{},"A role"," says what a person may do inside one organisation. It belongs to the link between that person and that organisation.",[213,221,222,224],{},[216,223,171],{}," says which CobraSphere products a person may open at all. It belongs to the person.",[91,226,228],{"id":227},"one-sign-in","One sign-in",[81,230,231],{},"A person signs in with a one-time code sent to one of their email addresses. There is no password. Once signed in on a cobrasphere.com address, the person is signed in on the other CobraSphere sites under cobrasphere.com as well. Sites on other addresses, such as zoneaudit.com, receive the sign-in from the Account console without a second code.",{"title":233,"searchDepth":234,"depth":234,"links":235},"",3,[236,238,239],{"id":93,"depth":237,"text":94},2,{"id":204,"depth":237,"text":205},{"id":227,"depth":237,"text":228},"The parts every CobraSphere product shares. Who a person is, which organisations they belong to, what their role lets them do, and which products they may open.","md",{},null,true,{"title":5,"description":240},"gQUXeJJF2U6L18I9eJFzLM6zxQu2PeXVXV3nF3l7WZI",[243,248],{"title":12,"path":13,"stem":14,"description":249,"children":-1},"One person, one CobraSphere ID, any number of verified email addresses.",1794325885755]