Allow self-registration / account requests for SSO
Currently, to provide access to new users, we need to collect their email address and full name, have an admin create their account, and then instruct them on how to set their password. If new users could simply visit the login page and there was an option so they can register for an account which then needs to be confirmed before they can use it, the whole process could be compressed and would need a lot less communication.
I think this needs two main config options:
- allow self-registration
- notify admin on new self-registration
New users register with E-mail address, password and name and then once their account is confirmed receive an e-mail notification and can get going immediately.
This could optionally be restricted to a specific mail-domain, and along that line it could be useful to have an option that prevents users from changing their account e-mail address as our SSO should be company-managed like with classic LDAP.