# SSO, OAuth/OIDC and token trust · Identity and access scope

Blank workpaper, not completed testing or approval. Do not include secrets or real personal data.

## Identity case / model revision / resource scope

[ ] Complete; add evidence and owner.

## Written authorization, scope and stop contact

[ ] Complete; add evidence and owner.

## Subject / group / role / resource / action

[ ] Complete; add evidence and owner.

## Assumptions / prerequisites / exclusions

[ ] Complete; add evidence and owner.

## Module-specific evidence

- Application/issuer/audience/token-purpose trust matrix.
- Negative validation plan and permission/consent review record.