Drift

Three flavors, one page. Policy drift is when running config diverges from the policy you authored. Baseline drift is when running config diverges from the snapshot you declared as your "good" state. Cross-system drift is when two identity systems disagree about the same principal (Okta says yes, AD says no).

Drift is computed by the daemon every cycle. Empty tabs mean either no drift, or no source for that drift type yet — set a baseline on /inventory for baseline drift, author policies on /policies for policy drift, or connect a second identity system on /onboarding for cross-system drift.