Force the nick name to be unique with a DB constraint, with an issue
where the user name for the OLAT token is the auto generated identity
name after changing the password

Adapt LDAP for auto/manual generated id. name, add unit tests for
special workflow (user which are created without authentication and get
LDAP token afterwards on login)

Login happens only with authentication informations, identity name is
now only used for legacy directory name. User name of authentication can
be changed. LDAP users can be imported with LDAP::ldapUid. Users can be
imported in courses, groups... with First name last name.

not set

organization, implement segment view for user visit card to better
inline in user management, implements several features for all roles
(allow enrollment, mandatory confirmation email by enrollment, allow
autocomplete, bulk changes...), add roles like lecture manager, quality
manager..., enhance the roles editor in user management

OO-3296: don't upgrade manager roles if administrator and decouple every role, remove double update roles method...

OO-3297: refactor the user management to use organization for managing the roles instead of named security groups

OO-3288, OO-3297, OO-3291: add model for organisations and curriculums, add curriculum manager global role

OO-3057: tweak performance of the synchronization of LDAP groups, make a set of identity keys to match the users