Every organization has more than one source of truth about people — HR for employees, a supplier portal for consultants, a student system, a service desk for shared and privileged accounts. Most identity projects fail not at authentication, but at the boring middle: deciding who is authoritative for which attribute, and what happens on day 1, day 300 and day 0.

In this session we build an identity store end to end. We define personas, map multi-source authority and precedence, drive attributes through a managed transformation layer, and let lifecycle events push provisioning and access — with governance attached from the start. We will do this using built-in support in Microsoft Entra for SCIM 2.0 and Inbound Provisioning API, own integration logic and store definitions, and best practice workflows from working with this right now at customers.

We show what works and what breaks: conflicting sources, re-hires, persona transitions, orphaned accounts, and the deprovisioning that silently never happened. Expect lots of demos, real failure cases, and 5–10 minutes of questions throughout.