I think we're going to need some authorization here.
Can anyone just create an orcid profile? Do we need to map the orcid profile to an OAE user? Does this need to be limited to tenant admins? etc..