The working group needs to describe JIT provisioning and how JIT provisioned accounts are managed.
- How are they linked to their primary owner?
- What happens if linking fails?
- Reaper processes?
This is related to Sections 4.6.3 and 4.6.7 of SP800-63C rev4. See also #71.
