Account Management Enhancements - 2023

[nniiicc]

• - We can't easily change email addresses for existing accounts...
• - Accounts aren't immediately registered with DV when created through OIDC on Drupal
• - ORCID limitation is that email is default set as private - and so does not help us to use email in the registration process...
• - How substantial is the technical debt of maintaining the email id as key id... ?
• - How much more work would adding MFA entail?

[nniiicc]

Re - transforming our LDAP infrastructure to rely on NEW identifier (not email) as key for users is...

• Not impossible...
• Given the three places we can have users come in from (orcid, google, and QDR) we can likely pick up a common variable to use for unique ID
• If we accept ORCID accounts that have an email set private... We need to consider how we will get their email in the future (maybe it is not system dependent but a follow up email?)...
• MFA will be pretty straightforward ...
• Changing emails - once we get off email this will be trivial ...
• Account propagation across apps (e.g. Dataverse) - we can explore but may need some DV code changes... This shouldn't be too hard, but may be more than a few hour fix