diff --git a/file/TapRefArch.puml b/file/TapRefArch.puml
new file mode 100644
index 0000000..4320c11
--- /dev/null
+++ b/file/TapRefArch.puml
@@ -0,0 +1,25 @@
+@startuml
+!include https://raw.githubusercontent.com/plantuml-stdlib/C4-PlantUML/master/C4_Container.puml
+' uncomment the following line and comment the first to use locally
+' !include C4_Container.puml
+
+' LAYOUT_TOP_DOWN()
+' LAYOUT_AS_SKETCH()
+' LAYOUT_WITH_LEGEND()
+
+title Container diagram for high-level TAP Capabilities
+
+System_Ext(SoR, "Systems of Record", "ERP and other systems that manage a population of users relevant to their operations")
+
+System_Boundary(tap, "TAP Reference Architecture") {
+    Container(reg, "Person Registry", " ", "Brings together data from Systems of Record, Resolves person identities")
+    Container(authn, "AuthN and Federation", " ", "Authentication, WebSSO, Identity Federation")
+    Container(group, "Groups, Access Policies", " ", "Group management, access policy administration")
+    Container(prov, "(De-)Provisioning        ", " ", "Provisioning and de-provisioning")
+}
+
+System_Ext(targ, "(De-)Provisioned Systems", "Systems and Services to be provisioned (local, federated or XaaS)")
+
+SoR -[hidden]> tap
+
+@enduml