mindtickle-prod-checklist

# MindTickle Production Checklist ## Overview MindTickle powers sales readiness at scale, managing user provisioning via SCIM, course progress tracking across thousands of reps, and quiz completion data that feeds pipeline forecasting. A production integration must enforce multi-tenant isolation through company-specific headers, handle SCIM provisioning race conditions during bulk onboarding, and ensure quiz score integrity under concurrent submissions. Misconfigurations here can leak training data across tenants, corrupt completion records, or silently drop user provisioning events during org restructures. ## Prerequisites - Production MindTickle API key and SCIM bearer token (not sandbox credentials) - Secrets manager configured (Vault, AWS Secrets Manager, or GCP Secret Manager) - Monitoring stack operational (Datadog, Grafana, or CloudWatch) - Company ID confirmed for multi-tenant header (`X-Company-Id`) - SCIM endpoint URL registered in your identity provider (Okta, Azure AD) ## Authentication & Secrets - [ ] API keys stored in vault/secrets manager (never in code or config files) - [ ] Key rotation schedule configured (every 90 days) - [ ] SCIM bearer token stored separately from general API keys - [ ] `X-Company-Id` header injected server-side (never exposed to client) - [ ] Service account permissions restricted to required modules only (courses, users, analytics) ## API Integration - [ ] Base URL points to `https://api.mindtickle.com/v2` (production, not sandbox)...