[{"data":1,"prerenderedAt":243},["ShallowReactive",2],{"docs-navigation":3,"docs-page-\u002Farchitecture\u002Fidentity":75,"docs-surround-\u002Farchitecture\u002Fidentity":238},[4,45,51,57,63,69],{"title":5,"path":6,"stem":7,"children":8},"Architecture","\u002Farchitecture","architecture",[9,11,15,19,23,27,31,35],{"title":5,"path":6,"stem":10},"architecture\u002Findex",{"title":12,"path":13,"stem":14},"Identity","\u002Farchitecture\u002Fidentity","architecture\u002F1.identity",{"title":16,"path":17,"stem":18},"Organisations","\u002Farchitecture\u002Forganisations","architecture\u002F2.organisations",{"title":20,"path":21,"stem":22},"Roles","\u002Farchitecture\u002Froles","architecture\u002F3.roles",{"title":24,"path":25,"stem":26},"Domains and claims","\u002Farchitecture\u002Fdomains-and-claims","architecture\u002F4.domains-and-claims",{"title":28,"path":29,"stem":30},"Access","\u002Farchitecture\u002Faccess","architecture\u002F5.access",{"title":32,"path":33,"stem":34},"Invitations and requests","\u002Farchitecture\u002Finvitations-and-requests","architecture\u002F6.invitations-and-requests",{"title":36,"path":37,"stem":38,"children":39,"page":44},"Data model","\u002Farchitecture\u002Fdata-model","architecture\u002F7.data-model",[40],{"title":41,"path":42,"stem":43},"ZoneAudit","\u002Farchitecture\u002Fdata-model\u002Fzoneaudit","architecture\u002F7.data-model\u002F1.zoneaudit",false,{"title":46,"path":47,"stem":48,"children":49},"Glossary","\u002Fglossary","glossary\u002Findex",[50],{"title":46,"path":47,"stem":48},{"title":52,"path":53,"stem":54,"children":55},"Guides","\u002Fguides","guides\u002Findex",[56],{"title":52,"path":53,"stem":54},{"title":58,"path":59,"stem":60,"children":61},"Products","\u002Fproducts","products\u002Findex",[62],{"title":58,"path":59,"stem":60},{"title":64,"path":65,"stem":66,"children":67},"Trust","\u002Ftrust","trust\u002Findex",[68],{"title":64,"path":65,"stem":66},{"title":70,"path":71,"stem":72,"children":73},"Updates","\u002Fupdates","updates\u002Findex",[74],{"title":70,"path":71,"stem":72},{"id":76,"title":12,"body":77,"description":231,"extension":232,"meta":233,"navTitle":234,"navigation":235,"path":13,"roleNote":235,"seo":236,"stem":14,"__hash__":237},"docs\u002Farchitecture\u002F1.identity.md",{"type":78,"value":79,"toc":222},"minimark",[80,85,94,97,101,104,126,129,133,136,140,143,219],[81,82,84],"h2",{"id":83},"one-person-one-cobrasphere-id","One person, one CobraSphere ID",[86,87,88,89,93],"p",{},"Every person in CobraSphere has one account and one CobraSphere ID. The ID starts with CSA and looks like ",[90,91,92],"code",{},"CSA-7K2P9QX4",". It is set once, when the account is first saved, and never changes. This is the ID to quote when asking for help. The identity service also keeps an internal identifier, which is never shown.",[95,96],"identity-diagram",{},[81,98,100],{"id":99},"email-addresses","Email addresses",[86,102,103],{},"A person can have more than one email address. One of them is the main address.",[105,106,107,111,114,117,120,123],"ul",{},[108,109,110],"li",{},"Each address belongs to one person only. The same address cannot sit on two accounts.",[108,112,113],{},"Addresses are stored in lower case.",[108,115,116],{},"A new address is verified with a code sent to it.",[108,118,119],{},"A verified address can be used to sign in, and it always leads to the same CobraSphere ID.",[108,121,122],{},"An address that a CobraSphere administrator added for the person can also sign in. The first correct code sent to it verifies it.",[108,124,125],{},"An address the person added and never verified cannot be used to sign in.",[86,127,128],{},"People manage their addresses in the Account console at account.cobrasphere.com.",[81,130,132],{"id":131},"signing-in","Signing in",[86,134,135],{},"There is no password. The person enters an email address, receives a one-time code at that address and enters it. The sign-in is then kept in a secure cookie, and it renews itself while the person keeps using CobraSphere.",[81,137,139],{"id":138},"account-status","Account status",[86,141,142],{},"Every account has a status.",[144,145,146,159],"table",{},[147,148,149],"thead",{},[150,151,152,156],"tr",{},[153,154,155],"th",{},"Status",[153,157,158],{},"What it means",[160,161,162,171,179,187,195,203,211],"tbody",{},[150,163,164,168],{},[165,166,167],"td",{},"Pending verification",[165,169,170],{},"The account was made and its first address is not yet verified",[150,172,173,176],{},[165,174,175],{},"Invited",[165,177,178],{},"A CobraSphere administrator set the account up in advance. It can sign in, and the first correct code makes it Active",[150,180,181,184],{},[165,182,183],{},"Active",[165,185,186],{},"The account is in use",[150,188,189,192],{},[165,190,191],{},"Merged",[165,193,194],{},"The account was joined into another account. It cannot sign in",[150,196,197,200],{},[165,198,199],{},"Inactive",[165,201,202],{},"The account was closed, for example after a request to close it. It cannot sign in",[150,204,205,208],{},[165,206,207],{},"Suspended",[165,209,210],{},"The account is stopped. It cannot sign in",[150,212,213,216],{},[165,214,215],{},"Deleted",[165,217,218],{},"The account is removed from use. It cannot sign in",[86,220,221],{},"A one-time code never reopens an account that is Inactive, Suspended or Deleted.",{"title":223,"searchDepth":224,"depth":224,"links":225},"",3,[226,228,229,230],{"id":83,"depth":227,"text":84},2,{"id":99,"depth":227,"text":100},{"id":131,"depth":227,"text":132},{"id":138,"depth":227,"text":139},"One person, one CobraSphere ID, any number of verified email addresses.","md",{},null,true,{"title":12,"description":231},"pqOuNOdRV9j39JeXYuhIjL4GCu-6TBvKtoFYMhbE75w",[239,241],{"title":5,"path":6,"stem":10,"description":240,"children":-1},"The parts every CobraSphere product shares. Who a person is, which organisations they belong to, what their role lets them do, and which products they may open.",{"title":16,"path":17,"stem":18,"description":242,"children":-1},"A business in CobraSphere, and how people belong to it.",1794325886543]