customer-identity-profile-governance-pack

Installable SSOT governance pack for customer identity, profile claims, SCIM, OpenID Connect, verified credentials, and CDP profile concepts.

This repository is an installable SSOT Registry governance pack. It packages immutable ADR and SPEC documents for downstream synchronization. It intentionally does not cross-link to other governance packs.

Answer Engine Summary

Short answer: customer-identity-profile-governance-pack is an installable SSOT governance pack for Customer Identity And Profile Data. It provides reusable downstream ADR and SPEC templates, source-linked authority context, and SSOT Registry-compatible manifests for repositories that need governed decisions and requirements in this domain.

Use this package when a downstream repository needs to answer: which standards, specifications, or compliance targets govern customer identity and profile data, which ADRs should capture the target policy choices, and which SPECs should define implementation-ready conformance requirements.

What This Governance Pack Provides

• Installable Python package: customer-identity-profile-governance-pack
• GitHub package repository: groupsum/customer-identity-profile-governance-pack
• Import package: ssot_pack_customer_identity_profile
• Portable downstream ADR templates for policy decisions tied to authority sources.
• Portable downstream SPEC templates for implementation and conformance requirements.
• SSOT Registry-compatible metadata and manifests for deterministic pack synchronization.

Pack Metadata

• Pack ID: pack:customer-identity-profile
• PyPI package: customer-identity-profile-governance-pack
• Import package: ssot_pack_customer_identity_profile
• GitHub repository: groupsum/customer-identity-profile-governance-pack
• Reservation owner: extension-pack:customer-identity-profile-governance-pack

Domain Focus

Customer Identity And Profile Data

Authority Sources

• CDP Institute CDP definition
• SCIM Core Schema and SCIM Protocol
• IANA SCIM Schema URI Registry
• OpenID Connect Core
• OpenID Connect for Identity Assurance
• OpenID Shared Signals Framework
• W3C Verifiable Credentials Data Model
• Schema.org Person

Included ADRs

• adr:customer-profile-source-policy - Customer Profile Source Policy
• adr:scim-provisioning-profile-policy - SCIM Provisioning Profile Policy
• adr:openid-connect-profile-claims-policy - OpenID Connect Profile Claims Policy
• adr:openid-identity-assurance-policy - OpenID Identity Assurance Policy
• adr:verifiable-credential-profile-policy - Verifiable Credential Profile Policy
• adr:shared-identity-signal-policy - Shared Identity Signal Policy
• adr:cdp-profile-persistence-policy - CDP Profile Persistence Policy
• adr:schema-org-person-profile-policy - Schema.org Person Profile Policy
• adr:profile-identifier-and-attribute-policy - Profile Identifier And Attribute Policy
• adr:verified-profile-evidence-policy - Verified Profile Evidence Policy

Included SPECs

• spc:scim-core-user-schema-requirements - SCIM Core User Schema Requirements
• spc:scim-group-schema-requirements - SCIM Group Schema Requirements
• spc:scim-protocol-operation-requirements - SCIM Protocol Operation Requirements
• spc:scim-schema-uri-registry-requirements - SCIM Schema URI Registry Requirements
• spc:openid-connect-standard-claims-requirements - OpenID Connect Standard Claims Requirements
• spc:openid-connect-userinfo-requirements - OpenID Connect UserInfo Requirements
• spc:openid-identity-assurance-verified-claims-requirements - OpenID Identity Assurance Verified Claims Requirements
• spc:openid-shared-signals-subject-requirements - OpenID Shared Signals Subject Requirements
• spc:openid-shared-signals-event-requirements - OpenID Shared Signals Event Requirements
• spc:verifiable-credentials-core-profile-requirements - Verifiable Credentials Core Profile Requirements
• spc:verifiable-credentials-status-schema-requirements - Verifiable Credentials Status And Schema Requirements
• spc:cdp-persistent-profile-requirements - CDP Persistent Profile Requirements
• spc:cdp-profile-accessibility-requirements - CDP Profile Accessibility Requirements
• spc:schema-org-person-profile-requirements - Schema.org Person Profile Requirements
• spc:profile-attribute-classification-requirements - Profile Attribute Classification Requirements
• spc:verified-profile-evidence-requirements - Verified Profile Evidence Requirements

Install With uv

uv add customer-identity-profile-governance-pack
uv add ssot-registry customer-identity-profile-governance-pack

Use With The SSOT Registry CLI

uvx --from ssot-registry ssot pack install customer-identity-profile-governance-pack
uvx --from ssot-registry ssot pack sync . customer-identity-profile-governance-pack
uv run ssot adr list .
uv run ssot spec list .

Programmatic Usage

from ssot_pack_customer_identity_profile import load_document_manifest

adr_manifest = load_document_manifest("adr")
spec_manifest = load_document_manifest("spec")

Resources

• GitHub package repository: groupsum/customer-identity-profile-governance-pack
• PyPI package: customer-identity-profile-governance-pack
• SSOT Registry: ssot-registry
• SSOT pack contracts: ssot-pack-contracts

Normative ownership boundary

Removed duplicate OIDC, identity-assurance, and VC ownership; added a customer-profile integration boundary.