As a sysadmin, I want an automated workflow for adding new users. Adding new users needs to be controlled. Users can either be authenticated by the SI active directory or be locally authorized by Drupal. Currently any user in AD can create an account and users outside SI have no method other than email to request an account.

A workflow needs to be incorporated that permits a user to request an account from a user services moderator (currently Beth and Dan). Who will approve the account. The user should be notified. If its a non-SI user, a secure automated method to provide credentials and force a password reset via email and/or during login is needed.

Note that in the future another issue will be to extend this to InCommon authn/authz.