slug: zitadel
provider: Zitadel
generated_by: planning/capability-mapping/scripts/classify_capabilities.py
model: claude-opus-5
frame:
- Software & Technology
min_confidence: 0.7
capability_model:
  source: https://github.com/vincentmakes/turbo-ea-capabilities
  license: CC-BY-4.0
  attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities,
    CC BY 4.0
  notice: NOTICE
edge_count: 4
edges:
- tag: Users
  spec_file: zitadel-users-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.88
  evidence: Zitadel Create Human User; Zitadel Create Machine User; Zitadel Deactivate User; Zitadel Lock
    User; listUserMemberships
  reason: Full identity account lifecycle — create human and machine users, deactivate/reactivate, lock/unlock,
    memberships — which is joiners-movers-leavers identity administration, not HR employee records.
- tag: Identity Providers
  spec_file: zitadel-identity-providers-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.78
  evidence: POST /management/v1/idps/_search  Zitadel List Identity Providers
  reason: Managing federated identity providers is squarely identity federation within Identity & Access
    Management; only one operation so confidence moderated.
- tag: Roles
  spec_file: zitadel-roles-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.75
  evidence: POST /management/v1/projects/{projectId}/roles  Zitadel Create Project Role
  reason: Creation and listing of authorization roles within an identity platform is role-based access
    control, part of Identity & Access Management; not an HR job-role capability.
- tag: Applications
  spec_file: zitadel-applications-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.7
  evidence: POST /management/v1/projects/{projectId}/apps/oidc  Zitadel Create OIDC Application; CreateApiAppRequest
  reason: Registration and lifecycle of OIDC/API client applications inside an identity platform — configuration
    of authentication clients, part of identity and access management rather than product/application
    portfolio management.