An external user creates a new PASTA profile.
Story: User/Group Management and Microsoft SSO #3
Goal:
Allow an external user to create a new system user profile.
Issues:
- https://github.com/PASTAplus/auth/issues/37
Actors:
- External user
- System
- Auth
Prerequisites:
- User has never authenticated to system with identity "A" (or, system has no record of identity "A")
Actions:
- User requests to authenticate with system.
- System requests user to select authentication service.
- User selects authentication service.
- User is redirected to Auth (authentication service).
- User authenticates using identity "A".
- Auth returns affirmation of authentication with identity "A".
- System creates and stores identity "A" (UID of identity assertion) in authentication record.
- System creates user profile "A" (UID of user profile) in user profile record.
- System adds user's common name (obtained from identity assertion) to profile "A".
- System creates relationship between identity "A" and user profile "A".
Notes:
Creating a user profile will likely include storing user and authentication information, and storing each set of information in a database table makes the most sense. There is an expectation that an individual will have the opportunity to authenticate with multiple IdPs and will want the same user profile to be active regardless of IdP used to authenticate. It is, therefore, reasonable to have a relationship cardinality of many auth entries to one user profile entry.

Issues:
- https://github.com/PASTAplus/auth/issues/37
An external user creates a new PASTA profile.
Story: User/Group Management and Microsoft SSO #3
Goal:
Allow an external user to create a new system user profile.
Issues:
Actors:
Prerequisites:
Actions:
Notes:
Creating a user profile will likely include storing user and authentication information, and storing each set of information in a database table makes the most sense. There is an expectation that an individual will have the opportunity to authenticate with multiple IdPs and will want the same user profile to be active regardless of IdP used to authenticate. It is, therefore, reasonable to have a relationship cardinality of
many auth entriestoone user profile entry.Issues: