{
  "_comment": "Chapter 05's fictional tenant (contoso.example), served by NpiFederation's fake Graph, Resource Manager, Active Directory and token endpoint. The IDs follow tests/fixtures/estate.json where an object appears in both. Invented IDs only; no real tenant, subscription, repository or person.",
  "tenantId": "c0ffee00-0000-4000-8000-000000000001",
  "asOf": "2026-10-30",
  "graph": {
    "applications": [
      {
        "id": "0a000000-0000-4000-8000-000000000001", "appId": "1a000000-0000-4000-8000-000000000001", "displayName": "Payroll Export",
        "passwordCredentials": [ { "keyId": "5e000000-0000-4000-8000-000000000001", "displayName": "payroll-2026", "endDateTime": "2027-01-31T00:00:00Z" } ],
        "keyCredentials": []
      },
      {
        "id": "0a000000-0000-4000-8000-000000000003", "appId": "1a000000-0000-4000-8000-000000000003", "displayName": "Legacy Reports",
        "passwordCredentials": [ { "keyId": "5e000000-0000-4000-8000-000000000003", "displayName": "reports-secret", "endDateTime": "2027-03-01T00:00:00Z" } ],
        "keyCredentials": []
      },
      {
        "id": "0a000000-0000-4000-8000-000000000004", "appId": "1a000000-0000-4000-8000-000000000004", "displayName": "Build Pipeline",
        "passwordCredentials": [], "keyCredentials": []
      },
      {
        "id": "0a000000-0000-4000-8000-000000000006", "appId": "1a000000-0000-4000-8000-000000000006", "displayName": "Mail Automation",
        "passwordCredentials": [ { "keyId": "5e000000-0000-4000-8000-000000000006", "displayName": "mail-secret", "endDateTime": "2027-02-28T00:00:00Z" } ],
        "keyCredentials": []
      },
      {
        "id": "0a000000-0000-4000-8000-000000000007", "appId": "1a000000-0000-4000-8000-000000000007", "displayName": "Deploy Bot",
        "passwordCredentials": [], "keyCredentials": [ { "keyId": "6e000000-0000-4000-8000-000000000007", "displayName": "CN=deploybot", "endDateTime": "2027-04-30T00:00:00Z" } ]
      }
    ],
    "federatedIdentityCredentials": {
      "0a000000-0000-4000-8000-000000000001": [
        { "id": "fc000000-0000-4000-8000-000000000011", "name": "payroll-test", "issuer": "https://token.actions.githubusercontent.com/", "subject": "repo:contoso/payroll:ref:refs/heads/test", "audiences": [ "api://AzureADTokenExchange" ], "description": "Created by hand in the portal" }
      ],
      "0a000000-0000-4000-8000-000000000003": [
        { "id": "fc000000-0000-4000-8000-000000000031", "name": "gh-reports", "issuer": "https://token.actions.githubusercontent.com", "subject": "repo:contoso/reports:environment:production", "audiences": [ "api://AzureADTokenExchange" ], "description": "Wave 1: replaces reports-secret" }
      ],
      "0a000000-0000-4000-8000-000000000004": [
        { "id": "fc000000-0000-4000-8000-000000000001", "name": "github-main", "issuer": "https://token.actions.githubusercontent.com", "subject": "repo:contoso/build:ref:refs/heads/main", "audiences": [ "api://AzureADTokenExchange" ] }
      ]
    },
    "servicePrincipals": [
      { "id": "5b000000-0000-4000-8000-000000000013", "appId": "1b000000-0000-4000-8000-000000000013", "displayName": "vm-batch01", "servicePrincipalType": "ManagedIdentity", "accountEnabled": true },
      { "id": "5b000000-0000-4000-8000-000000000016", "appId": "1b000000-0000-4000-8000-000000000016", "displayName": "id-hrsync", "servicePrincipalType": "ManagedIdentity", "accountEnabled": true },
      { "id": "5b000000-0000-4000-8000-000000000012", "appId": "1b000000-0000-4000-8000-000000000012", "displayName": "Old SAML Connector", "servicePrincipalType": "Legacy", "accountEnabled": true }
    ],
    "signIns": [
      { "id": "51000000-0000-4000-8000-000000000001", "createdDateTime": "2026-09-21T02:00:05Z", "appId": "1b000000-0000-4000-8000-000000000016", "servicePrincipalId": "5b000000-0000-4000-8000-000000000016", "signInEventTypes": [ "managedIdentity" ], "clientCredentialType": "managedIdentity", "federatedCredentialId": "", "servicePrincipalCredentialKeyId": "", "status": { "errorCode": 0 } },
      { "id": "51000000-0000-4000-8000-000000000002", "createdDateTime": "2026-10-29T02:00:04Z", "appId": "1b000000-0000-4000-8000-000000000016", "servicePrincipalId": "5b000000-0000-4000-8000-000000000016", "signInEventTypes": [ "managedIdentity" ], "clientCredentialType": "managedIdentity", "federatedCredentialId": "", "servicePrincipalCredentialKeyId": "", "status": { "errorCode": 0 } },
      { "id": "51000000-0000-4000-8000-000000000003", "createdDateTime": "2026-10-16T03:10:00Z", "appId": "1b000000-0000-4000-8000-000000000013", "servicePrincipalId": "5b000000-0000-4000-8000-000000000013", "signInEventTypes": [ "managedIdentity" ], "clientCredentialType": "managedIdentity", "federatedCredentialId": "", "servicePrincipalCredentialKeyId": "", "status": { "errorCode": 0 } },
      { "id": "51000000-0000-4000-8000-000000000004", "createdDateTime": "2026-10-29T03:10:00Z", "appId": "1b000000-0000-4000-8000-000000000013", "servicePrincipalId": "5b000000-0000-4000-8000-000000000013", "signInEventTypes": [ "managedIdentity" ], "clientCredentialType": "managedIdentity", "federatedCredentialId": "", "servicePrincipalCredentialKeyId": "", "status": { "errorCode": 0 } },
      { "id": "51000000-0000-4000-8000-000000000005", "createdDateTime": "2026-09-05T11:00:00Z", "appId": "1a000000-0000-4000-8000-000000000003", "servicePrincipalId": "5b000000-0000-4000-8000-000000000003", "signInEventTypes": [ "servicePrincipal" ], "clientCredentialType": "federatedIdentityCredential", "federatedCredentialId": "fc000000-0000-4000-8000-000000000031", "servicePrincipalCredentialKeyId": "", "status": { "errorCode": 0 } },
      { "id": "51000000-0000-4000-8000-000000000006", "createdDateTime": "2026-10-27T11:00:00Z", "appId": "1a000000-0000-4000-8000-000000000003", "servicePrincipalId": "5b000000-0000-4000-8000-000000000003", "signInEventTypes": [ "servicePrincipal" ], "clientCredentialType": "federatedIdentityCredential", "federatedCredentialId": "fc000000-0000-4000-8000-000000000031", "servicePrincipalCredentialKeyId": "", "status": { "errorCode": 0 } },
      { "id": "51000000-0000-4000-8000-000000000007", "createdDateTime": "2026-10-28T23:30:00Z", "appId": "1a000000-0000-4000-8000-000000000003", "servicePrincipalId": "5b000000-0000-4000-8000-000000000003", "signInEventTypes": [ "servicePrincipal" ], "clientCredentialType": "clientSecret", "federatedCredentialId": "", "servicePrincipalCredentialKeyId": "", "status": { "errorCode": 0 } },
      { "id": "51000000-0000-4000-8000-000000000008", "createdDateTime": "2026-10-20T08:00:00Z", "appId": "1a000000-0000-4000-8000-000000000004", "servicePrincipalId": "5b000000-0000-4000-8000-000000000004", "signInEventTypes": [ "servicePrincipal" ], "clientCredentialType": "federatedIdentityCredential", "federatedCredentialId": "fc000000-0000-4000-8000-000000000001", "servicePrincipalCredentialKeyId": "", "status": { "errorCode": 0 } }
    ]
  },
  "azure": {
    "userAssignedIdentities": {
      "/subscriptions/11111111-1111-4111-8111-111111111111/resourceGroups/rg-identity/providers/Microsoft.ManagedIdentity/userAssignedIdentities/id-hrsync": {
        "name": "id-hrsync", "location": "eastus",
        "properties": { "clientId": "1b000000-0000-4000-8000-000000000016", "principalId": "5b000000-0000-4000-8000-000000000016", "tenantId": "c0ffee00-0000-4000-8000-000000000001" },
        "federatedIdentityCredentials": []
      },
      "/subscriptions/11111111-1111-4111-8111-111111111111/resourceGroups/rg-identity/providers/Microsoft.ManagedIdentity/userAssignedIdentities/id-deploy": {
        "name": "id-deploy", "location": "eastus",
        "properties": { "clientId": "1b000000-0000-4000-8000-000000000014", "principalId": "5b000000-0000-4000-8000-000000000014", "tenantId": "c0ffee00-0000-4000-8000-000000000001" },
        "federatedIdentityCredentials": [
          { "id": "/subscriptions/11111111-1111-4111-8111-111111111111/resourceGroups/rg-identity/providers/Microsoft.ManagedIdentity/userAssignedIdentities/id-deploy/federatedIdentityCredentials/gh-deploy", "name": "gh-deploy", "type": "Microsoft.ManagedIdentity/userAssignedIdentities/federatedIdentityCredentials", "properties": { "issuer": "https://token.actions.githubusercontent.com", "subject": "repo:contoso/infra:environment:production", "audiences": [ "api://AzureADTokenExchange" ] } }
        ]
      }
    },
    "roleAssignments": [
      { "id": "/subscriptions/11111111-1111-4111-8111-111111111111/resourceGroups/rg-hr/providers/Microsoft.Authorization/roleAssignments/7a000000-0000-4000-8000-000000000001", "properties": { "principalId": "5b000000-0000-4000-8000-000000000016", "principalType": "ServicePrincipal", "roleDefinitionId": "/subscriptions/11111111-1111-4111-8111-111111111111/providers/Microsoft.Authorization/roleDefinitions/ba92f5b4-2d11-453d-a403-e96b0029c9fe", "scope": "/subscriptions/11111111-1111-4111-8111-111111111111/resourceGroups/rg-hr/providers/Microsoft.Storage/storageAccounts/sthrexport" } },
      { "id": "/subscriptions/11111111-1111-4111-8111-111111111111/resourceGroups/rg-batch/providers/Microsoft.Authorization/roleAssignments/7a000000-0000-4000-8000-000000000002", "properties": { "principalId": "5b000000-0000-4000-8000-000000000013", "principalType": "ServicePrincipal", "roleDefinitionId": "/subscriptions/11111111-1111-4111-8111-111111111111/providers/Microsoft.Authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c", "scope": "/subscriptions/11111111-1111-4111-8111-111111111111/resourceGroups/rg-batch" } }
    ]
  },
  "ad": {
    "objects": [
      { "SamAccountName": "svc-hrsync", "ObjectGUID": "ad000000-0000-4000-8000-000000000001", "Enabled": true, "LastLogonDate": "2026-09-19T22:14:00Z" },
      { "SamAccountName": "svc-webfront", "ObjectGUID": "ad000000-0000-4000-8000-000000000009", "Enabled": true, "LastLogonDate": "2026-10-29T10:00:00Z" },
      { "SamAccountName": "svc-intranet", "ObjectGUID": "ad000000-0000-4000-8000-000000000012", "Enabled": true, "LastLogonDate": "2026-10-28T09:00:00Z" },
      { "SamAccountName": "svc-batch", "ObjectGUID": "ad000000-0000-4000-8000-000000000021", "Enabled": true, "LastLogonDate": "2026-10-14T01:00:00Z" },
      { "SamAccountName": "svc-mailer", "ObjectGUID": "ad000000-0000-4000-8000-000000000022", "Enabled": true, "LastLogonDate": "2026-10-29T06:00:00Z" }
    ]
  }
}
