Moving INTERNAL_USER ahead of OPENID_CONNECT as it will result in more responsiveness for anonymous requests
OpenIDM 3.1 now ships with ICF 1.4 connector, so we need to update our provisioner config to match
Completing the UI and server-side script changes necessary to present token for authentication, as well as provision user data into managed/user (and ultimately DJ as well, via sync)
Looking to the roles property for the managed/user to set their authz role
Moving the call to read the userinfo so that it only occurs when the user doesn't already exist in managed/user