Petitioner

initiates

Enrollment

Flow

Start

step executes

introduction

_text

defined?

Plugins called for step

Start

Y

N

Select Org Identity

step executes

org_identity

_mode

set?

Plugins called for step

Select Org Identity

Y

Petitioner Attributes

step executes

(env attributes retrieved)

Plugins called for step

Petitioner Attributes

N

Petition

artifact

created,

status set to Created

authz_level

not none?

Authenticate

Petitioner

Y

N

New operational identities created, status Pending

Send Confirmation

step executes

verify_email

true?

Plugins called for step

Send Confirmation

Y

Confirmation email sent, status set to Pending Confirmation

Redirect

(on submit)

issued

Enrollee

confirms

email

address

Process Confirmation

step executes

N

Enrollee accepts confirmation

?

Status set to Declined

require_authn

true?

Status set to Confirmed

Plugins called for step

Process Confirmation

Enrollment terminated

Collect Identifier step executes

Plugins called for step

Collect Identifier

Redirect

(on confirm)

issued

approval_

required

true?

Send Approver Notification step executes

Y

N

Y

N

Approve step executes

Approver responds to notification

Approver approves petition?

Status set to Denied

Status set to Approved

Plugins called for step

Approve

Plugins called for step

Send Approver Notification

Send Approval Notification step executes

Plugins called for step

Send Approval Notification

Finalize step executes

Person Status set to Active, Petition Status set to

Finalized

Plugins called for step

Finalize

Enrollment completed

Y

N

Y

N

Deny step executes

Plugins called for step

Deny

Petition not denied?

Y

N

Identifiers assigned, if appropriate

Status set to Pending Approval

Select Enrollee

step executes

match_policy

defined?

Plugins called for step

Select Enrollee

Y

N

Provision

step executes

Plugins called for step

Provision

Finalization notification sent

Petition finalized?

Y

Provisioners executed

notify_on_

finalize true?

Y

N

N

Duplicate Check Enabled and Found?

Flag as

Duplicate

Merge Records

Merge

N

Status set to Duplicate

Redirect

(on confirm

or finalize)

issued