department-of-veterans-affairs / va.gov-cms

Editor-centered management for Veteran-centered content.
https://prod.cms.va.gov
GNU General Public License v2.0
99 stars 69 forks source link

PIV card login before account is created by our team should NOT automatically create new "ghost" account #16543

Closed stefaniefgray closed 10 months ago

stefaniefgray commented 10 months ago

User Story or Problem Statement

As part of our broader effort to bust ghost accounts (see #16508 for context and explanation of how "ghost" accounts are created via premature PIV logins), they should not be created in the first place.

User accounts should be approved and created by a member of our team via the usual protocols, and they should not be automatically created within the system if a user with no account attempts to log into https://prod.cms.va.gov/ using their PIV card.

Description or Additional Context

See #16508

Steps for Implementation

CleanShot2023-12-21at13 12 09 Turn off User Provisioning and update user creation workflows.

Acceptance Criteria

Team

Please check the team(s) that will do this work.

stefaniefgray commented 10 months ago

cc: @BerniXiongA6 @maortiz-27-80 @edmund-dunn