Improved

A major identity and access-control layer is now in place across Coach Pulse — the security backbone for the pilot and rollout.Access control<ul><li>Roster- and domain-based access — corporate members resolve through their Tapestry domain account; store team members are matched against the HR roster. Tiered identity resolution (domain → federated alias → verified backfills) covers every account type.</li><li>Status-aware — suspended, inactive, deactivated, or not-yet-approved accounts are denied, so Coach Pulse stays limited to current team members.</li><li>Break-glass — a controlled path to restore access when it is needed.</li></ul>Hardening<ul><li>ALB-verified identity is now enforced consistently across the consumer app and the admin tools, and admin no longer creates unkeyed profiles.</li><li>The health check no longer leaks schema details and fails fast on a hung database.</li></ul>For users<ul><li>A clear, localized "account not provisioned" message (all 15 languages) when an account isn't set up yet, plus correct sign-out behavior.</li></ul>

Identity & Access Control: Secure, Roster-Based Sign-In

Help Center

Fixed

Production

futureproof

In Review

Planned, but No Date

Planned, With Date

Deployed to QA.

Approved Through QA/Ready for UAT

UAT Approved.

Submitted to CAB

Completed And Live In Production

Rejected

High Priority

Low Priority

REJECTED

Backlog

Next up

Deployed to QA

UAT Approved

Completed and Working In Production

Coach Pulse Roadmap

Hey {name|there}! 👋

FutureProof

Identity & Access Control: Secure, Roster-Based Sign-In